General

  • Target

    31c84f0b117e59d3b599926a02f896e0_NeikiAnalytics.exe

  • Size

    415KB

  • MD5

    31c84f0b117e59d3b599926a02f896e0

  • SHA1

    64f5857d6574be150ce8b71b4455aa3fb31d97a9

  • SHA256

    c53068ff0fc9d79175011c1a3b1416c2b0139ec5bc55cc9a4bd90f27f0b8af41

  • SHA512

    36b35bffe6d136195ed0d2260a9098352c9e08c8105c16ce3e0124941a68918d8b1e9f4c15f1e02702666532995bab5091f9b98e00e458b82766931a4ae60813

  • SSDEEP

    12288:UatAVmEQ7ZacnjBNkY7LoGmkCdc10PVEtbPU5iEQ8Kl:VtAVmEo7jBNkVGwM0OtbcQEQ8I

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 31c84f0b117e59d3b599926a02f896e0_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86

    b40f29cd171eb54c01b1dd2683c9c26b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • Airways_3.bmp
    .jpg
  • Haarknude/Tomb/afgivelserne/Adventure_20.bmp
    .jpg
  • Haarknude/Tomb/afgivelserne/Velseslokaler.Uru
  • Spdbrnsplejerskernes.Ves
  • Svejfedes/Syllogization/Kampucheansk/GameBoxPlugin.dll
    .dll windows:6 windows x64 arch:x64

    9b8453f2f0569499235280ff3138afc3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Svejfedes/Syllogization/Kampucheansk/License.rtf
    .rtf
  • Svejfedes/Syllogization/Kampucheansk/ext.txt
  • Svejfedes/Syllogization/Kampucheansk/shathree.c