1f96629b88a8cc0fd42f32b83dc219b546b51d9976be25f6beb97b061ea77fde_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f96629b88a8cc0fd42f32b83dc219b546b51d9976be25f6beb97b061ea77fde_NeikiAnalytics.exe
Size

6KB
MD5

a058c8fc95ca2ecea35daf174b639b00
SHA1

fb7652cb78b0bc6cab7bac694fc0bad99727cd83
SHA256

1f96629b88a8cc0fd42f32b83dc219b546b51d9976be25f6beb97b061ea77fde
SHA512

b88286cbb40ae21e363f9ffc1ca06b44067e32f04a558962120ee6d34c8db48c664fed579d53c0f87115dc4438565f6da06ed0f986b3915263a23945fa993611
SSDEEP

96:nEY2RrF1eqwi4mod9KSlNWxQktw7mjyPbkYTP8lA2ZjqV5b1kjG6:EHRh1eppmM9XqKvwA2ZG6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f96629b88a8cc0fd42f32b83dc219b546b51d9976be25f6beb97b061ea77fde_NeikiAnalytics.exe

Files

1f96629b88a8cc0fd42f32b83dc219b546b51d9976be25f6beb97b061ea77fde_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ