810da18818c49d9405fce2357530a142149ecd0763f457e5d95130c1f12b5733_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

810da18818c49d9405fce2357530a142149ecd0763f457e5d95130c1f12b5733_NeikiAnalytics.exe
Size

6KB
MD5

51b69f5856174894bf28fef62948a760
SHA1

a8957765d83f3e792cb8528ad189de80745d4d90
SHA256

810da18818c49d9405fce2357530a142149ecd0763f457e5d95130c1f12b5733
SHA512

9c92c753ed99176c55e849be05c5536b49df53b9f9a37fe22492e4875a15ad035f4a81dde1f94af2205e39538eda9bb4bb9ec566cf394622f026ecebd5e1be33
SSDEEP

48:6EQt5YVOSVVEPy+wEMmqiHNpU10zB+BDq9J5SV3DY:CSVVEPozmB7BB+FqX5S1D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
810da18818c49d9405fce2357530a142149ecd0763f457e5d95130c1f12b5733_NeikiAnalytics.exe

Files

810da18818c49d9405fce2357530a142149ecd0763f457e5d95130c1f12b5733_NeikiAnalytics.exe
.dll windows:1 windows x86 arch:x86

0ed11c14a2759c69bfa93dd64e1f1654

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetEnvironmentStringsA
CloseHandle
GetSystemDirectoryA
OpenMutexA
RtlUnwind
WinExec

crtdll

_fdopen
_open_osfhandle
fclose
_cexit
malloc
printf
raise
setbuf
sprintf
strcpy

Exports

Exports

_Udarim_kartonom_po_USD

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84B - Virtual size: 84B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 176B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 620B - Virtual size: 620B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 152B - Virtual size: 152B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE

.edata
Size: 84B - Virtual size: 84B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ