737cf86f8e8cfe9e788a3c992a97a490_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

737cf86f8e8cfe9e788a3c992a97a490_NeikiAnalytics.exe
Size

2.5MB
MD5

737cf86f8e8cfe9e788a3c992a97a490
SHA1

b1495f3e95e8ab30fc25413dd2a25b8e8ab3a4b4
SHA256

318607a12adede232822af01311d6f7713a399ffefb6470cd5141a6d7c3e9d3f
SHA512

e7f3eb43b99f05d18d33f8d7975a69cc7684f0179ffbcba4b4142732bded579bd302e71f7d3524e70648732bab45f304500fada377a89aa866c7f64ae614af32
SSDEEP

12288:V1Xa7MRjuS1D3ciL+p4sjYr4nckjybEpNv41UHtkFfsaYTkTlo0gJaxFR:fKwp1b2EhE3aFfvYUJggbR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
737cf86f8e8cfe9e788a3c992a97a490_NeikiAnalytics.exe

Files

737cf86f8e8cfe9e788a3c992a97a490_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 576KB - Virtual size: 575KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE