9344c2978cc5cada2569c64cd6fd2c30_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

9344c2978cc5cada2569c64cd6fd2c30_NeikiAnalytics.exe
Size

1.0MB
MD5

9344c2978cc5cada2569c64cd6fd2c30
SHA1

6e4003b3694f0239b304469a4cd3627896c5b6d6
SHA256

a7f38ad5c8960a2bc134d423753fafb55b292e05c7ea710de5f704bf137d7f1a
SHA512

a942153008a59a60df67e3c533773b2e17b6da1d8bdfe3c7a8c25c314abe26c9f648c976eeb24e7f51817b1788f2d8b51f46cb7f9d2be2530cdebf6853649fa3
SSDEEP

24576:jf2VfWlcKu6Gavkg3NydIbbbI4IBAUZLYO5/:7uscKu6GaXUT4IBAUZLYOJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9344c2978cc5cada2569c64cd6fd2c30_NeikiAnalytics.exe

Files

9344c2978cc5cada2569c64cd6fd2c30_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

2fecad82d36d88ec85ac574c16ce0ddd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

malloc
memcmp
free
qsort
strlen
sprintf
memcpy
strcmp
_initterm
_adjust_fdiv
memset
_errno
strchr
abort
_strdup

kernel32

GetModuleFileNameA
GetACP
Sleep

Exports

Exports

_libiconv_version
libiconv
libiconv_close
libiconv_open
libiconv_set_relocation_prefix
libiconvctl
libiconvlist
locale_charset

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 800KB - Virtual size: 799KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE