55e1f9f56e0ccf58a63bbda291966f43fb5eea6df2ab7e7f98c770bc31e921ea_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55e1f9f56e0ccf58a63bbda291966f43fb5eea6df2ab7e7f98c770bc31e921ea_NeikiAnalytics.exe
Size

47KB
MD5

a23ae97fd2c2659ced06fc7b09e561c0
SHA1

9f85784583c242d59ae0110f02e971878ab343e1
SHA256

55e1f9f56e0ccf58a63bbda291966f43fb5eea6df2ab7e7f98c770bc31e921ea
SHA512

8369e8f0f245d0a3acafd3a57bd210beb4e9cc4e7fae2206264bed45f2f22fa373944ce7277f6522d5e94c1a8312ad674b02f33a828e2daac7ec66480528bfd2
SSDEEP

768:4ebo+rW/GgxtPJKaVcnzfAAj2NUR9vboScElNVPaSHL:4e6/GgxtPJ/Wnzt2idcElNVPdr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55e1f9f56e0ccf58a63bbda291966f43fb5eea6df2ab7e7f98c770bc31e921ea_NeikiAnalytics.exe

Files

55e1f9f56e0ccf58a63bbda291966f43fb5eea6df2ab7e7f98c770bc31e921ea_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

PyInit_vtkRenderingVolumeAMR
PyVTKAddFile_vtkAMRVolumeMapper
PyVTKAddFile_vtkRenderingVolumeAMRModule
real_initvtkRenderingVolumeAMR

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ