844676c9b9bc8b9992891024d0d99de0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

844676c9b9bc8b9992891024d0d99de0_NeikiAnalytics.exe
Size

57KB
MD5

844676c9b9bc8b9992891024d0d99de0
SHA1

b97d1e7348615be85117a3c6a81d99855162caa7
SHA256

989ee14662cde50737c94be33b18e12b5a416939109429cbf28334fba9ce26cc
SHA512

7ec9764963d47ef587b8a1d060854172dc52ae183f3d4af8158f79b04bef44c3fecfd00e6a2dfa19ebe8872f586098d9085fa920a463a289ac9d848b11242a6e
SSDEEP

768:HTn5Kc1ZW0sjLQSSxdEJk5rAHoRMO/5T91+WZ/vw0b8KdhQz1Yxh2oAjmY44m4mx:z5KyWVjLyxdOLM5B7Rvb8KLQz1YTjcU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
844676c9b9bc8b9992891024d0d99de0_NeikiAnalytics.exe

Files

844676c9b9bc8b9992891024d0d99de0_NeikiAnalytics.exe
.exe windows:1 windows x86 arch:x86

17a4bd9c95f2898add97f309fc6f9bcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess

Sections

.bss
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE