47657cf19158bbc61148d6a1b2ad0470_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

47657cf19158bbc61148d6a1b2ad0470_NeikiAnalytics.exe
Size

150KB
MD5

47657cf19158bbc61148d6a1b2ad0470
SHA1

0e0102c9a490095f9d800fc1ade8eb2ac23c9f36
SHA256

a1b110cc70e356e4afa3e0a45c2c0c4043d73a7a78889f495372f0a7edda683e
SHA512

07a4a95fd2ef75a4f3232400f88a2f1abe9b52259073c43a5be3f220bd836626cef7a1082a10f43b0c7c1f07e52ef9ba028829b38305f299b284be23b3caa3ce
SSDEEP

3072:wrRnTzrFyOtV18gJ5q6nWdAvEDdj+fHy7HI8ENN6aKyI:oyOtVuzdAs4vx6a5I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47657cf19158bbc61148d6a1b2ad0470_NeikiAnalytics.exe

Files

47657cf19158bbc61148d6a1b2ad0470_NeikiAnalytics.exe
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

GPBExecutePack

Sections

CODE
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 13KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 77B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ