e415738f60c5674775dfc18aafd9ab50_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e415738f60c5674775dfc18aafd9ab50_NeikiAnalytics.exe
Size

53KB
MD5

e415738f60c5674775dfc18aafd9ab50
SHA1

e9904f1459971832b25da6f31aa92a1ec493f5ef
SHA256

24ab19deb39b2f6925695ed02c7b3b9fc44b518e7875044d9d2e287be57b9649
SHA512

a1c093d11dab131eeb16bdfca8b24ddae3d49ac88e1d4094bf1d56c3b43ca3a722d1884b79a4f7f285516443a80a6a26fa6095b7ffd44b8af40b788075ff9515
SSDEEP

768:j7uWl//QHevdXdgqEE2z0vfKdeJKnTAgSEQTlZZ2oUXjmY44m4m4m4PU:jq8H4M92ziKdeJKPSEQTlLj8U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e415738f60c5674775dfc18aafd9ab50_NeikiAnalytics.exe

Files

e415738f60c5674775dfc18aafd9ab50_NeikiAnalytics.exe
.exe windows:1 windows x86 arch:x86

17a4bd9c95f2898add97f309fc6f9bcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess

Sections

.bss
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE