4aaf29cd5c08dbaae46a0b467ed06078eabde553afca1c4be4148d383b3c48b4_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4aaf29cd5c08dbaae46a0b467ed06078eabde553afca1c4be4148d383b3c48b4_NeikiAnalytics.exe
Size

4KB
MD5

50e560b82ab6e761e154e0c3fe0cacb0
SHA1

cef34ab80b0e9930c3b3a241ddbcc9052c69b774
SHA256

4aaf29cd5c08dbaae46a0b467ed06078eabde553afca1c4be4148d383b3c48b4
SHA512

7c91674a4325b78ddb2bf06e6cddb8148b0d6edb2f4419a75508e97e14ef98531363d85b5d221571f9f82f43946e907c1b192526a09b9c320ada15995417edec

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4aaf29cd5c08dbaae46a0b467ed06078eabde553afca1c4be4148d383b3c48b4_NeikiAnalytics.exe

Files

4aaf29cd5c08dbaae46a0b467ed06078eabde553afca1c4be4148d383b3c48b4_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

35a9e9974c673669c35cafffdf20e1bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId

Exports

Exports

ClearPointers
LoadPointers
MarkAsLeftover
StorePointers
WibuIsLeftoverModule
tlsDirectorySpace

Sections

.text
Size: 512B - Virtual size: 281B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ