48e795c0e44a699ed10f29017a14b122de62967f5ade44fd85e0559d42e8195b_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48e795c0e44a699ed10f29017a14b122de62967f5ade44fd85e0559d42e8195b_NeikiAnalytics.exe
Size

480KB
MD5

8518c75da7381f80d91c5dae855f50e0
SHA1

b9ac1af655a393cada0681523b018fb99745c01a
SHA256

48e795c0e44a699ed10f29017a14b122de62967f5ade44fd85e0559d42e8195b
SHA512

d0ee774d3bd20f6eb5bd76498f967050b3380c8f6f075ff4ea260ac5bb45259100b44ff80aedf88d24d2b74f21f20d4761e44c89b6c18ab41032ab514cfda4fe
SSDEEP

3072:EnQxzBzdfYopWiNgLcqsx1PI9sopv4sYq5JToatGh5LD2i93TlGvqWivLoZjLQRs:nzdfxpWmqcQbAE6BukDlhWIxNTUIfqH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48e795c0e44a699ed10f29017a14b122de62967f5ade44fd85e0559d42e8195b_NeikiAnalytics.exe

Files

48e795c0e44a699ed10f29017a14b122de62967f5ade44fd85e0559d42e8195b_NeikiAnalytics.exe
.dll regsvr32 windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

win32spl.pdb

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
InitializePrintMonitor2
InitializePrintProvidor
ProviderEntryW

Sections

.text
Size: 450KB - Virtual size: 450KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ