6a2de928b56d6116715f16d107b65480_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a2de928b56d6116715f16d107b65480_NeikiAnalytics
Size

472KB
MD5

6a2de928b56d6116715f16d107b65480
SHA1

864344cf357a58342312e7f15a30ffd7ad07f2f2
SHA256

bf0f8e654d7b1ac937f4339b3228d4b5b94973363ef4202e1bda9a33cd954431
SHA512

a502df731f437db953a6c212958bd138d8d11449c42e88f321c2967c0e2d090d6a1a086281a47b7e7457da408d47d969db8e7a510abb41f5686e399181476a10
SSDEEP

12288:8HG98DOHSeEKGLXIJkwrmrrIZpYAHnkE35:jZXEKKYJkwrsrIZmDE35

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a2de928b56d6116715f16d107b65480_NeikiAnalytics

Files

6a2de928b56d6116715f16d107b65480_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

f0d4d888365525da27840d92b16e9939

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_acmdln
__set_app_type
_controlfp
_except_handler3
exit
_XcptFilter
_cexit
_exit
__p__fmode
_c_exit

kernel32

GetModuleHandleA
GetStartupInfoA

hypertrm

MessageLoop
InitInstance

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ