4e37144a9fb4254d5b0e37cc4edfb1b1b90b7465dab5f5a04757f30d574fcc8a_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e37144a9fb4254d5b0e37cc4edfb1b1b90b7465dab5f5a04757f30d574fcc8a_NeikiAnalytics.exe
Size

63KB
MD5

881c026e3c1a068a34e84c550cbaf520
SHA1

e5cf8d03381f54997abd87b3bd67a40ab180f9b8
SHA256

4e37144a9fb4254d5b0e37cc4edfb1b1b90b7465dab5f5a04757f30d574fcc8a
SHA512

53dad4a65baf20d3c66c2cc0696300039f38daf06e8b9e4eb1f67bd7778c8cf8d2f8b43711e37633d3495f7a292a25da3ace05963a26e30d9613e235a513a52e
SSDEEP

1536:U78/YIsE3GpVwnuEEeq+nZ9roScmk90v1+QoNv0ePULUJN:Ug/XbG7wfq/ScX928QoROUJN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e37144a9fb4254d5b0e37cc4edfb1b1b90b7465dab5f5a04757f30d574fcc8a_NeikiAnalytics.exe

Files

4e37144a9fb4254d5b0e37cc4edfb1b1b90b7465dab5f5a04757f30d574fcc8a_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

e758baecb75debce72a1b65e655f2d4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumCalendarInfoExEx
GetConsoleAliasExesW
AddRefActCtxWorker
PostQueuedCompletionStatus
GetCurrentPackageInfo
StartThreadpoolIo
BasepGetComputerNameFromNtPath
AddIntegrityLabelToBoundaryDescriptor
GetUserDefaultLangID

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE