5638235db7c6aca1335d0c47140172c0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5638235db7c6aca1335d0c47140172c0_NeikiAnalytics.exe
Size

20KB
MD5

5638235db7c6aca1335d0c47140172c0
SHA1

e7b7b4396e7622c6eb0066cc5dfc4d65e537e1bd
SHA256

8690aa122d3ec38ab3c6970cb708ec27f40947527ca87afb9d566ef15cd9e78c
SHA512

ff82a9195a68ad61721993ec930ee7d6aaaae0c88cb12a77c860797b07959e29cd6c617529ca695bc250addf0890368021c08dc24a6ec16c2c98dba3243bf386
SSDEEP

24:ev1GS6kGKwvR1C/1+tXV+Rjtj46UqUt9sXjvInAVp:q6kGKwPCNEN5qUtCXcA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5638235db7c6aca1335d0c47140172c0_NeikiAnalytics.exe

Files

5638235db7c6aca1335d0c47140172c0_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

23f1d31488be5fa18f1a49380623eac7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

malloc
_initterm
strncpy
free
_adjust_fdiv

kernel32

DisableThreadLibraryCalls

Exports

Exports

SLP_FORMATTER

Sections

.text
Size: 4KB - Virtual size: 494B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ