6661f371a4efaead79e27a4c1e357410_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6661f371a4efaead79e27a4c1e357410_NeikiAnalytics.exe
Size

5.6MB
MD5

6661f371a4efaead79e27a4c1e357410
SHA1

8e130ef754d3a2dd3bd7df2407c2d8a99338bb57
SHA256

031e03421e1b5f9e7c1b209896cd7b0616ebe41f43c4bb9084cb8f7262dd1b93
SHA512

5472f1bf16513789c474b8a482c949f0febc715d94ad471c6f3cac245c1daa4679a3968a09374549681a3cb6207c77d91707a02c5b31cf686672f1462bccd5e0
SSDEEP

768:AOJQ1G8F4b4LuTbT8orI+t6SnigzJY6QF5q5U+IPRgy8jmY44m4m4m4PUJ:AX1G8FBGT8UQgpQTqGFfoUJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6661f371a4efaead79e27a4c1e357410_NeikiAnalytics.exe

Files

6661f371a4efaead79e27a4c1e357410_NeikiAnalytics.exe
.exe windows:1 windows x86 arch:x86

17a4bd9c95f2898add97f309fc6f9bcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess

Sections

.bss
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE