24d9f5dacef06ab09bd81f484c3646d0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24d9f5dacef06ab09bd81f484c3646d0_NeikiAnalytics.exe
Size

2.0MB
MD5

24d9f5dacef06ab09bd81f484c3646d0
SHA1

a973e112488779272e07614047cbdbf2324848ef
SHA256

888a522350059bf63c9236c5e64738cbcd1e13157d611bca928e16d02b2c2e56
SHA512

1eb6bc4f10cada138cabd58862bfcefabcdd73fd142f2cbaeef5781574f41c06e90a9d4c81ba0622f767b5a1741cdc6df72ab12706863a7ddd9ee1fb4d675274
SSDEEP

24576:pLxIyvczsx/fo2M8LDlDXos//qNDvuiM1YVgmLrzte7OkaKjoDAFGJp:RxIZzsxm8fFnXsgywo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24d9f5dacef06ab09bd81f484c3646d0_NeikiAnalytics.exe

Files

24d9f5dacef06ab09bd81f484c3646d0_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

fdd4038b1671827e268fdbac830acaff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
ExitProcess
GetModuleHandleA
WriteConsoleW
HeapAlloc

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ