4fe1968f89da61ec4018dbc599dbb090_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fe1968f89da61ec4018dbc599dbb090_NeikiAnalytics
Size

119KB
MD5

4fe1968f89da61ec4018dbc599dbb090
SHA1

7bf5113b9e2ddf1790210da57a9dab8d30b14a4c
SHA256

05980dce1cfc0fe94fe09ab208ca02e64ec1a8ac9e8fb505a07a4edf454615ce
SHA512

ed446ecf9795636670baf9937d8d6c395dce7d3833f6ae766b70130a6360d1778799c874d708dda0c31dce6d263e088ed7f4c03e1c03d5cad125bd6b445c6862
SSDEEP

3072:gZvHPT5+ZUBTyR1PLT9rC/7BJYzhsqobJj+wLd:glHPT5+DTfFC/7BOuqcJ6wR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fe1968f89da61ec4018dbc599dbb090_NeikiAnalytics

Files

4fe1968f89da61ec4018dbc599dbb090_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

6762431e87e162106f5eef6cb46c84c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommMask
DeleteFileTransactedW
GetConsoleTitleW
ReOpenFile
CreateFileMappingW
SetCommState
GetThreadLocale
CreateProcessAsUserW
ReadConsoleOutputCharacterW
lstrcpynA
FoldStringW
SetFirmwareEnvironmentVariableA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE