5bffd1c1b41a285a410add333e5a9f00_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bffd1c1b41a285a410add333e5a9f00_NeikiAnalytics.exe
Size

105KB
MD5

5bffd1c1b41a285a410add333e5a9f00
SHA1

54c8ddd8d92e77a31b57edf9f9fdf70dea292182
SHA256

21e61700f094553e4c3cce8b99a660bafbb68aeaa9aa612684b1ad130e9c9c2d
SHA512

324e101148d4e04b0ae2f79b94e38f8d065cd9819a68352291c7d890b6cfe21e44a4f73cad11079b75068be0cd26c8316d24f2a708dfb47f325f3dfacc1d4f43
SSDEEP

1536:ZteuoKjuRxKswfOrkgwwRsgtOznzOBEFCm7HeMHZFRNWFA40mBsAfgUp:ZRiR8TcFEaY5HeMHTjAfgG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bffd1c1b41a285a410add333e5a9f00_NeikiAnalytics.exe

Files

5bffd1c1b41a285a410add333e5a9f00_NeikiAnalytics.exe
.exe windows:1 windows x86 arch:x86

17a4bd9c95f2898add97f309fc6f9bcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess

Sections

.bss
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE