c1c8858c9ebbc76605777aee5960e470_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1c8858c9ebbc76605777aee5960e470_NeikiAnalytics.exe
Size

3KB
MD5

c1c8858c9ebbc76605777aee5960e470
SHA1

00883270ca6d936b2507e4af11ef789b78bd7660
SHA256

4b3a63e6d237a93977d18ed9f37c7a0798e16fb6ccfaa91741d2b234ee89c7c4
SHA512

895cb3601e6820c3f012018215d0a10647d3455d0297d284cead04321d32b9b2d6c0a68b589d98d9d5d43902903f839dc8b997620d3f1deddbc57da038cbd876

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1c8858c9ebbc76605777aee5960e470_NeikiAnalytics.exe

Files

c1c8858c9ebbc76605777aee5960e470_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 559B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ