2dcf37eeb77e688afbdb9f4f832c5050_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dcf37eeb77e688afbdb9f4f832c5050_NeikiAnalytics.exe
Size

36KB
MD5

2dcf37eeb77e688afbdb9f4f832c5050
SHA1

67823cbecdf6d1828a68c1eba266e58b93a85049
SHA256

40f437f26764c0139d1dbff7b5e3fb341641e998f6aa081ff4b58debdf47415c
SHA512

19eebd7b48a9e471f7d81893406166d20233024898dc70599f6c938f92983716487f85a8211a1e3dee7027c489664bd933f76ef21cb8cbcd7155085f2fa5c55b
SSDEEP

384:RnOZMQRzdZP3LpbDTtvNJQcYkjjjjjjjjiMJK:ZOMQRzbPtfTtV4kjjjjjjjj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dcf37eeb77e688afbdb9f4f832c5050_NeikiAnalytics.exe

Files

2dcf37eeb77e688afbdb9f4f832c5050_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

4ecb146d4dc1a2f4143d3968b575a83a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

carclw60

CARC__EnterInstance
CARC__ExitInstance
CARC__CallUnderflowError
GOL$FILLDATA
GOL$COPYDATA
GOL$85
CARC__GetDynamicCallAddress
GOL$COPYFILL
GOL$58
CARC__StopRun
_CARC__LibraryMain@12

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RCLID_TE
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RCLEP_DA
Size: 4KB - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 130B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ