09a2552ea13ee556492fe2f5b8e032895a7a95eeefc84687d735a60c0bf99def_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09a2552ea13ee556492fe2f5b8e032895a7a95eeefc84687d735a60c0bf99def_NeikiAnalytics.exe
Size

245KB
MD5

02d5c4a7dd116e6de5c05f642bbabf50
SHA1

600713379672d6e675fbbdb6fcfa7e28ce28e958
SHA256

09a2552ea13ee556492fe2f5b8e032895a7a95eeefc84687d735a60c0bf99def
SHA512

906ffcd88f1fe9d2b2a152745c450f7e68be0a54b74afb9d5685c15fb3698db387e10694b3efbc142a982f53c4efa08544798c622b7e74be5a4c84544518a6e2
SSDEEP

3072:SCAxRRhePrfW88iwRg6HFk4D9+FeWmWVamVpeJUlGuf/Ext0nZ46Nr3L4/4MGbCh:S3JwPrfW8WFN9IecXqUlhf/i0fGwRmb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09a2552ea13ee556492fe2f5b8e032895a7a95eeefc84687d735a60c0bf99def_NeikiAnalytics.exe

Files

09a2552ea13ee556492fe2f5b8e032895a7a95eeefc84687d735a60c0bf99def_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

18c89e2ec0a399c68eaedd6551ce71fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ