5ddca89592a1fb01288ad04a47255bf0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ddca89592a1fb01288ad04a47255bf0_NeikiAnalytics
Size

2.8MB
MD5

5ddca89592a1fb01288ad04a47255bf0
SHA1

613ec9958b65adc3928307a9a86d3698218f03a4
SHA256

11b7711262590849b931f8a22e2558bdb7b5c9ad1bb03130cda3dfaa46433c29
SHA512

9054b493a3b8e231723e950948771bf706b1ab6078909a969e3900bfcb2ed23074c95eb0015cc6355f90dbeed9a736d86fd1fc014dcf6422d9419c11baceddf3
SSDEEP

24576:bUEJ+tama/ana7a3WnW3WXWLcWnPWi3Wu2++QWH/oZNMgytdIUDhZHWAnQjMdW5e:4EJdTya+3WnW3WXWoWP1WjHWNpqMi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ddca89592a1fb01288ad04a47255bf0_NeikiAnalytics

Files

5ddca89592a1fb01288ad04a47255bf0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 128KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE