58f20847d6b1006aa3199d70f7b2a660_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58f20847d6b1006aa3199d70f7b2a660_NeikiAnalytics.exe
Size

320KB
MD5

58f20847d6b1006aa3199d70f7b2a660
SHA1

5af4ab9a2dda1091abcdcbaeb88fdffbe36b677a
SHA256

699c784f0022610750256e91ec4556ce5314c78fa99af85db0272ae96f47e476
SHA512

ab369d4f4c7ca90b8d207a879f4b7b2ce1a846d93a489a05b9de8056dcffdeead9b71a80b9948710cad0d24951bf661165805a815b97a414e882f18e9b310466
SSDEEP

6144:38KYPF3jnPo/H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:RYZjPq2EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58f20847d6b1006aa3199d70f7b2a660_NeikiAnalytics.exe

Files

58f20847d6b1006aa3199d70f7b2a660_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

2a5b77e55ea4fd6ace4ede55f65de122

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableW
GetProfileStringA
AllocateUserPhysicalPages
GetVolumePathNamesForVolumeNameA
SetTimerQueueTimer
SetNamedPipeHandleState
_lread
RemoveLocalAlternateComputerNameW
IsDBCSLeadByteEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE