d5ec374cb17cb7a961c2513353df04c0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5ec374cb17cb7a961c2513353df04c0_NeikiAnalytics.exe
Size

857KB
MD5

d5ec374cb17cb7a961c2513353df04c0
SHA1

fbf4437463916ac2544b037d8a316aae5dbfa0e8
SHA256

de2180d24c012d3a62bbb63fe715714cf6b3c1ac9bcfef75e18b87d3446bac11
SHA512

e6ee668c7b5f0b8e34a7a96e10aed047ad5c90cd70bf3eb3a05ccb08900b664ccdae893652232933629cdd0ee1ef717029864858e68195d91989b939b5dbcecd
SSDEEP

24576:HYcRcP+o9eRzHH43l1ThPANvvRC5ksha60WhscLKMMrCBh2kuE7ggj:LcPX0zHH43l1ThPANvvRC5k76rscLDvp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5ec374cb17cb7a961c2513353df04c0_NeikiAnalytics.exe

Files

d5ec374cb17cb7a961c2513353df04c0_NeikiAnalytics.exe
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Localize
SetActiveServices
UpdateCustomerName

Sections

CODE
Size: 758KB - Virtual size: 758KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ