093e1018ea1ebb54ad7c1cc54f8e3485f678f8e657d0455199f70a632c36474e_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

093e1018ea1ebb54ad7c1cc54f8e3485f678f8e657d0455199f70a632c36474e_NeikiAnalytics.exe
Size

1.0MB
MD5

0ceb31035572429a0f01ab3211796330
SHA1

06785687c53b2705a943f2a3ee55b96d6c08388c
SHA256

093e1018ea1ebb54ad7c1cc54f8e3485f678f8e657d0455199f70a632c36474e
SHA512

546832f49e1c20580c73789d0cac18354e41509786bdacdddf667de6b59a2803707f06a51f40d30ec4dc3f5f633f7a393e45ed15d8466f42c9082bb4e5dc70a6
SSDEEP

24576:PmFz3fxoB/lbnh9mwERRxDR8CcedKXPje5xBfRp9tqVZ:PO3JoB/dTmwEsVuKGxj6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
093e1018ea1ebb54ad7c1cc54f8e3485f678f8e657d0455199f70a632c36474e_NeikiAnalytics.exe

Files

093e1018ea1ebb54ad7c1cc54f8e3485f678f8e657d0455199f70a632c36474e_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

4710e694cbc904bbde58b1960e1a3f6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
SetEnvironmentVariableW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetFileSizeEx
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 1.3MB

.idata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ