ad5700bec57086dd2ababa0aaca049d0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad5700bec57086dd2ababa0aaca049d0_NeikiAnalytics.exe
Size

94KB
MD5

ad5700bec57086dd2ababa0aaca049d0
SHA1

aaae9e3cbf71b0f6bee0002f6f942829ddee8b68
SHA256

b09913712ffb09b6dbb4b42c30d267f6baed27b72f2d1faff6fbe3cbc463bba6
SHA512

f01b45f0e0b48428189e34eeaa4e55dfde50682224b034a59f04919e8e4c9bfcbfa46781c812becc0f1fcffbf91c782c55d72f268720311a9caddc3b98216a6e
SSDEEP

768:HhY0tP3s6oteQd+u9Te1Aurq6o1f11hDtST7KoP+diXjF+YlZO1LmVcARXodnKxJ:bPdWxef6fbhhStXYYD+vsXaifoU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad5700bec57086dd2ababa0aaca049d0_NeikiAnalytics.exe

Files

ad5700bec57086dd2ababa0aaca049d0_NeikiAnalytics.exe
.exe windows:1 windows x86 arch:x86

17a4bd9c95f2898add97f309fc6f9bcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess

Sections

.bss
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE