484d40206239040d9632d02e190048d0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

484d40206239040d9632d02e190048d0_NeikiAnalytics.exe
Size

124KB
MD5

484d40206239040d9632d02e190048d0
SHA1

2a893e0c1104a4f11addc889d55243938e12e0a5
SHA256

5681ea35dce74e771ac40d63002f291e27cf491a0032e4958b937b46e6ec8be3
SHA512

f9b04c495b4fa9499b87174c7ecdb7beee2692e799f4a1a435103311cda80d8ffce22fdaac27c9383a466090ab90d54d14cabfd617021985e62ed5f3749ea027
SSDEEP

1536:iKkd5NtThfzVP7Cm6apFuNWIwmHA3v4Hgd5FaNW1ryUPwi9:iK+NtNfzVPbN4+v4HgPG8fwo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
484d40206239040d9632d02e190048d0_NeikiAnalytics.exe

Files

484d40206239040d9632d02e190048d0_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Exports

Exports

Symtem6DaBNN
wslprsrftcViO118

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ