3779993fa04768944d04d9cc79c68fb0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3779993fa04768944d04d9cc79c68fb0_NeikiAnalytics.exe
Size

35KB
MD5

3779993fa04768944d04d9cc79c68fb0
SHA1

b9c61f9058caed5069a9e954a4625589a6301a02
SHA256

7c115c9ec0c1477e9f234bae961fb497ba332a2fdcb5ec01a0e65fa2192e8906
SHA512

fe3e26b79d5c0ec62bbf7abfe4fb6adfa173c47c23a0c108a1937107fe3dc3d0cbeb5df1cd1d0f47cbe6c6ee020069d8fea3b0be342968a4059c998136224b26
SSDEEP

768:k1LsRaZSPehlxaSd2gR2DJMQW1DoKxozWKp5YyKDiLv1nG7BY0LNw:k1PmAYpmyvdG9YB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3779993fa04768944d04d9cc79c68fb0_NeikiAnalytics.exe

Files

3779993fa04768944d04d9cc79c68fb0_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

1626e80ba1a65bdb07ae7a94127e2514

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Imports

kernel32

VirtualFree
GetSystemInfo
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetProcAddress
HeapFree
HeapAlloc
GetProcessHeap
GetStdHandle

Exports

Exports

_runfunc@20

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.etext
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ