6673561635a84a5f8d1db13cff1745024dc064fa19cbdcdf79a22838d817c9ea_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6673561635a84a5f8d1db13cff1745024dc064fa19cbdcdf79a22838d817c9ea_NeikiAnalytics.exe
Size

6KB
MD5

a8d8743c09ecc2e62b89e10ae05af550
SHA1

6719886b7a60142516d8148bf883594e020b57f1
SHA256

6673561635a84a5f8d1db13cff1745024dc064fa19cbdcdf79a22838d817c9ea
SHA512

dadd851dbd1102303b479969f093be50cb09dac3fb0b82e40cad4a852811cb0a1cdd8539806da94dadec167cf0e90dae5f5a1b5dbc73a0da930d8ee548dd12ef
SSDEEP

96:DixZjmjtjd8jPjcZGR5TI7N5Co9+sSHjcY/5nQRbCWj7NCKDqQ:unSR6bgYsC2+vHH/5nQVD7N5Dq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6673561635a84a5f8d1db13cff1745024dc064fa19cbdcdf79a22838d817c9ea_NeikiAnalytics.exe

Files

6673561635a84a5f8d1db13cff1745024dc064fa19cbdcdf79a22838d817c9ea_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ