317599b8e51ab03762cf0634517b0c69825f799e159ee5cbc59da38984ca9f69_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

317599b8e51ab03762cf0634517b0c69825f799e159ee5cbc59da38984ca9f69_NeikiAnalytics.exe
Size

592KB
MD5

ea8d51d65ce2ebb618c467d878f76090
SHA1

8bf3e8f8556afb3c9a73df521d0a0982997efd99
SHA256

317599b8e51ab03762cf0634517b0c69825f799e159ee5cbc59da38984ca9f69
SHA512

ab0c8649f0fc0746cc2d8e34568b8d04c66626b606ce13cc22214bb48ab5918cf0699f74870cc011b57fd29f9cf0663cb3aebdd2f1cd8ba6d7c7b1e2db893b17
SSDEEP

1536:m/SILp/4apgcFs8SaswSIhleS074ugixGCJmGn9OdPRo1G:m/SILpwWFzhl0pgUG6mGn9Od

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
317599b8e51ab03762cf0634517b0c69825f799e159ee5cbc59da38984ca9f69_NeikiAnalytics.exe

Files

317599b8e51ab03762cf0634517b0c69825f799e159ee5cbc59da38984ca9f69_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 504KB - Virtual size: 503KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.wpp_sf
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ