6d115a038a9bb171e6f5b494e04283a0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d115a038a9bb171e6f5b494e04283a0_NeikiAnalytics.exe
Size

90KB
MD5

6d115a038a9bb171e6f5b494e04283a0
SHA1

7eda374fafd2d53b6844a52bb3bcc57ed44af5b7
SHA256

7f6bf87388e8a6c6e978dd7a641dbff8ba0de9f4e53358756cf94260ad55241e
SHA512

d1c6f72d159b781f6eb7aef962c462d4d31d9b4939f9485f573a80ca14e02c2cc8cf26df386b3019f97f8d2ca3b2650d7a9e66310847126d22c9599c4ef99cba
SSDEEP

1536:O5SEh9ds84NDOcfOyqcl0zyByxunnz5/IU:O5SEps84ND8O0pun9/I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d115a038a9bb171e6f5b494e04283a0_NeikiAnalytics.exe

Files

6d115a038a9bb171e6f5b494e04283a0_NeikiAnalytics.exe
.exe windows:1 windows x86 arch:x86

17a4bd9c95f2898add97f309fc6f9bcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess

Sections

.bss
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE