654db4674758e5b279513f9dc2669520_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

654db4674758e5b279513f9dc2669520_NeikiAnalytics.exe
Size

7KB
MD5

654db4674758e5b279513f9dc2669520
SHA1

41c027b79672c008536a2e25a2242ce4bcfdb73e
SHA256

2820f42320bcba842b2e06ec8e335ff59e313330a4e32f3db901c87faeaf1b0c
SHA512

352cef3baea2df66332cc45ff05736f8240c8e6dea163b9aacd8b932e6a41f33f0caf401bf35ac0773808ba5105332287428ff098257032a937b6180179aa5d4
SSDEEP

96:rRWPir7JP4oynrXJsCuOtJyg4DzvWEBCUtung7IOlT:r4PihP4oyndskKD7WEBCUtung7IOl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
654db4674758e5b279513f9dc2669520_NeikiAnalytics.exe

Files

654db4674758e5b279513f9dc2669520_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

b56715f5fce6901f5244ff4f01c6970f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

tcl85

Tcl_Init
Tcl_SetVar
Tcl_Main

msvcrt

_initterm
_controlfp
setlocale
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE