313a9a3bb6b1e03248ef2050dbcefc70_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

313a9a3bb6b1e03248ef2050dbcefc70_NeikiAnalytics.exe
Size

44KB
MD5

313a9a3bb6b1e03248ef2050dbcefc70
SHA1

a83beeec326637413d5d8024ca2668eaf32c5bd5
SHA256

bb789b62ece1060c105c64d70f18f3d03a9e6b757403b2c8b643eb1c511b776b
SHA512

7f190087ab1bfd28ae22c21ddfa963584384a4e4f5cc06c6813cca29b4a70db98064fc7a01cd90863ce3b1d8586bc32f0845313145822938d466b77e92b652c3
SSDEEP

384:fYJVovJ4MvbDGnJSdm7njyaNHLgyHhopymLZqDZeRM5UynD:fYJVm48DOckjyaNrgyHh6Fc8RM5HnD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
313a9a3bb6b1e03248ef2050dbcefc70_NeikiAnalytics.exe

Files

313a9a3bb6b1e03248ef2050dbcefc70_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

202d34ba057ddbcc6bb14ad48015353d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

f3biprct

ord1
ord3
ord24
ord14
ord54
ord67
ord82

kernel32

DisableThreadLibraryCalls

Exports

Exports

OECUSIM2

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ