750ea7bf4541706197627dd6f30128a0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

750ea7bf4541706197627dd6f30128a0_NeikiAnalytics.exe
Size

1.2MB
MD5

750ea7bf4541706197627dd6f30128a0
SHA1

c66bb305531780ab5fac962f31d8026335cc53dd
SHA256

2780083a0d6bb83a0bd6f4387728c0e1b1546f5a3f7e6a081fae7b9c0aea4507
SHA512

2b8c65c815b96710eaf500399d863101f2131370df670926fd17f25bcf69972cf0529ecbdff1151121e73e2e2a1d4ec947a5913524beb14308d283ca30ea5bc5
SSDEEP

24576:G5TLg42jhNBEketxXBkqa3ClBBmFsuiJ:Glc42jhNBetxXBsCMFsJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
750ea7bf4541706197627dd6f30128a0_NeikiAnalytics.exe

Files

750ea7bf4541706197627dd6f30128a0_NeikiAnalytics.exe
.exe windows:1 windows x64 arch:x64

a4f03f699cdd68ad086c6e70e19b19d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

ExitProcess
GetBinaryTypeA
GetCommandLineA

shell32

ShellExecuteA

shlwapi

SHGetValueA
SHSetValueA

user32

GetSystemMetrics
wsprintfA

Sections

.code
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 276B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 480B

IMAGE_SCN_MEM_READ

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_MEM_READ