d46530d26d6e5d7333169825bc719c70_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d46530d26d6e5d7333169825bc719c70_NeikiAnalytics.exe
Size

721KB
MD5

d46530d26d6e5d7333169825bc719c70
SHA1

5467597252f8346ea7a168c573b95297c394c075
SHA256

d2db66bb3d39f6fabc082471ad608c06e00f57270031819ac0031306cb65ff89
SHA512

ff32f6c4e7b3bc3ca7bc83cfd1b67e620fd37dc2ebabc22ce954b1d308b49df9641624e67e24dfff6fa81e9c3b9bab8b4fa0c9a26226aa3b4f4ecb98dcda2023
SSDEEP

768:AOJQ1G8F4b4LuTbT8orI+t6SnigzJY6QF5q5U+IPRgy8jmY44m4m4m4PUT:AX1G8FBGT8UQgpQTqGFfoUT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d46530d26d6e5d7333169825bc719c70_NeikiAnalytics.exe

Files

d46530d26d6e5d7333169825bc719c70_NeikiAnalytics.exe
.exe windows:1 windows x86 arch:x86

17a4bd9c95f2898add97f309fc6f9bcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess

Sections

.bss
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE