ac106aca8b4d0874ae7f8072377c7c342d2e98e6533b3e879bcc1b51fdc8067d_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac106aca8b4d0874ae7f8072377c7c342d2e98e6533b3e879bcc1b51fdc8067d_NeikiAnalytics.exe
Size

5.8MB
MD5

9e731682742cd9b3bc098ea84d58b190
SHA1

52d674d5e455104e7efdad15b049e89cfe6a3e2a
SHA256

ac106aca8b4d0874ae7f8072377c7c342d2e98e6533b3e879bcc1b51fdc8067d
SHA512

6e753692dc0188d9e1c68904efbd8ab8c424b6e42c21f45f20d26a6336a5b53e1a6cf9b0abec517097f4cbe787bba0f4dda83f43e62a13009a865a4cb6f71016
SSDEEP

49152:L7vWIDI8B92Fbq5Vv1Q3rBIU6ikGtlqQVwASOGRw8beAOmnDvghmCoADPDMBMXLb:pi2++POmnDIrPDMyGnTLQm+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac106aca8b4d0874ae7f8072377c7c342d2e98e6533b3e879bcc1b51fdc8067d_NeikiAnalytics.exe

Files

ac106aca8b4d0874ae7f8072377c7c342d2e98e6533b3e879bcc1b51fdc8067d_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 5.2MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ