05536e3468a0f1b24c6bf40d74828f20_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05536e3468a0f1b24c6bf40d74828f20_NeikiAnalytics
Size

50KB
MD5

05536e3468a0f1b24c6bf40d74828f20
SHA1

90f020a670e0aefcafbfc32477cbb4e3006ab15a
SHA256

71fbd7af61028f2cedc8c2c9b84048ddb39f91edc2d9014e494fdbe81558a3df
SHA512

e07f0a0282de0a1b3990c011f309bd5ffab19cfb6b9dd5e5fb4decb9cf61ae922d4873ec05d975beed9ad75d4aeb8c5a5ce425a649e05dc75913c45610bd1078
SSDEEP

768:2PitRNEGtXXnZ/JudBDtcUtdVCxVOS3fNGq5xgBQY:RF3wDtkx3P5xxY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05536e3468a0f1b24c6bf40d74828f20_NeikiAnalytics

Files

05536e3468a0f1b24c6bf40d74828f20_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

32ea2988a92c31a9efd5b936dc243a44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

mscms

GetColorDirectoryW

kernel32

GetLastError
ExitProcess
GetModuleHandleW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ