52d662e521ec4704664b77f2f3681a80_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
52d662e521ec4704664b77f2f3681a80_NeikiAnalytics.exe
Size 80KB
Sample240613-blc1zssdkm
SHA256 4e85f203b304034b1b565932e066f1109e224ad900c25752aa302f6bb63eff68
MD5 52d662e521ec4704664b77f2f3681a80
SHA1 0537c6575dbaff8762c4bfbecc0ec697e917affe
SHA512 aa46df28310dce43d38241053d2725c8c284f8baa12ac0a1710c97f2b76c95ff3a267ab765cc445845b6078cf5b1c23c2463d4da5542f48a052f6524317fb1c2
SSDEEP 1536:seQUi189ngE/fQ3p8GYDm4ajh6Lwec/Y3t9jO52LpvS5DUHRbPa9b6i+sIk:sPugBP/65xS5DSCopsIk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52d662e521ec4704664b77f2f3681a80_NeikiAnalytics.exe

File Explorer

52d662e521ec4704664b77f2f3681a80_NeikiAnalytics.exe

.exe 80KB

52d662e521ec4704664b77f2f3681a80_NeikiAnalytics.exe

SHA256 4e85f203b304034b1b565932e066f1109e224ad900c25752aa302f6bb63eff68
MD5 52d662e521ec4704664b77f2f3681a80
SHA1 0537c6575dbaff8762c4bfbecc0ec697e917affe
SHA512 aa46df28310dce43d38241053d2725c8c284f8baa12ac0a1710c97f2b76c95ff3a267ab765cc445845b6078cf5b1c23c2463d4da5542f48a052f6524317fb1c2
SSDEEP 1536:seQUi189ngE/fQ3p8GYDm4ajh6Lwec/Y3t9jO52LpvS5DUHRbPa9b6i+sIk:sPugBP/65xS5DSCopsIk
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

196610

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

31KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.kofbl

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.l1

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

8KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

52d662e521ec4704664b77f2f3681a80_NeikiAnalytics.exe

generic