62c3f617d9154cd1a16e1fb323fdd620_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62c3f617d9154cd1a16e1fb323fdd620_NeikiAnalytics.exe
Size

320KB
MD5

62c3f617d9154cd1a16e1fb323fdd620
SHA1

30cd03142d824cb5322d52a1cbb0e97acff7f34e
SHA256

46e01c66c4e5032980f29c01e01dc81adda196c00ca8306ba17ceece2b01965a
SHA512

104da67ac872aee5414252b012e688e10710a3e6e02d028d5c632af0d8d92d26c7c2e914a2408890643aefb0f034faa903730049b83a567385c97a85833cf6e1
SSDEEP

6144:0QShgi5EH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:vSU2EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62c3f617d9154cd1a16e1fb323fdd620_NeikiAnalytics.exe

Files

62c3f617d9154cd1a16e1fb323fdd620_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

12809a69631a25956030ea9f3cadd644

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemWow64DirectoryA
GetStringTypeW
CreateActCtxW
CreateIoCompletionPort
GetProcessWorkingSetSize
SetFirmwareEnvironmentVariableW
DnsHostnameToComputerNameA
SetConsoleWindowInfo
LocalAlloc
FindFirstFileExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE