49169414daf792e1f67b7cf65e6e08f0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49169414daf792e1f67b7cf65e6e08f0_NeikiAnalytics.exe
Size

30KB
MD5

49169414daf792e1f67b7cf65e6e08f0
SHA1

8aa29458f16237d286a4ed088b4d3074becac505
SHA256

5640f0e32bfa1ef8c922f4f51667c9f01e5319d1ba286357a588012b827f772a
SHA512

a1e7d6a48452f8dcc39e1f6792eafd1321915ac0bd4d6ab96cf373242e8e0a746fe491b2e2714d63ed5bc7da415784b1c67c40cf0e58a8a87c87beaa33009774
SSDEEP

768:gGnGaBPKNdqfrLSUnxy/klytDPbwlS1oeZJ33RR/:jG6PUdqXQXtdomD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49169414daf792e1f67b7cf65e6e08f0_NeikiAnalytics.exe

Files

49169414daf792e1f67b7cf65e6e08f0_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

ef718cd7d8b5bcb1a827dfc130555dc4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
FindAtomA
GetAtomNameA

msvcrt

__dllonexit
_errno
_iob
abort
fclose
fflush
fopen
fprintf
free
fseek
fwrite
malloc
memcpy
memset
printf
remove
sprintf
strlen
strncpy
tmpnam

Exports

Exports

Tkimgsgi_Init
Tkimgsgi_SafeInit

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 304B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 107B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ