c4106861d9125da2de6609f1d78e1240_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

c4106861d9125da2de6609f1d78e1240_NeikiAnalytics.exe
Size

3KB
MD5

c4106861d9125da2de6609f1d78e1240
SHA1

13468e2103860fe9acb940f3ffc70f8605c63e9b
SHA256

bc294e051d26c8836bebeeae4b402c046bd29675391fbc3eee8c5ef14052d804
SHA512

5e2db832ddfa02e59c386fdfaeea0319c91b8ea73a9d0caf546aea89cea79171fa8bc6f181dda61920be9149c87e3b5953f1c4abc65ffb283adf5db812d70340

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4106861d9125da2de6609f1d78e1240_NeikiAnalytics.exe

Files

c4106861d9125da2de6609f1d78e1240_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ