179e98b4fe38405c214db78b68d69c2af0a7520f771c387e265534be7fbebde0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

179e98b4fe38405c214db78b68d69c2af0a7520f771c387e265534be7fbebde0_NeikiAnalytics.exe
Size

7KB
MD5

091968aaf852df31389d4af061dec340
SHA1

0e9e678469a64c23d0b27e490aef7be427c13645
SHA256

179e98b4fe38405c214db78b68d69c2af0a7520f771c387e265534be7fbebde0
SHA512

107f2f8490c55669938d12a17404f468c41b7179b75cbe66e52a14a6fdd2f4376c8d28a21f936b6e4e5ecc68bf9a3e2a09612ac66942e11ce43ae59834576818
SSDEEP

192:rC+GWpdXSHkpW/0sQBY1uW24A07uuF4lhJMwz:bdiHkpW/wIA07tFLw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
179e98b4fe38405c214db78b68d69c2af0a7520f771c387e265534be7fbebde0_NeikiAnalytics.exe

Files

179e98b4fe38405c214db78b68d69c2af0a7520f771c387e265534be7fbebde0_NeikiAnalytics.exe
.exe windows:1 windows x86 arch:x86

1e999df63c83bd2694d70029a6c2d1fb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt20

strcat
strcpy
strrchr
exit
printf
atoi
atol
strcmp
memcpy
strlen
rename
fclose
fputs
fopen
getenv
perror
_exit
_XcptFilter
__p___initenv
_initterm
__getmainargs
_adjust_fdiv
__p__commode
__p__fmode
_except_handler3
_controlfp
fgets
ctime
time
_unlink

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 292B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 694B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 406B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ