29ede210207cbc8f495d57a861f6f610_NeikiAnalytics | Triage

Sharing

General

Target

29ede210207cbc8f495d57a861f6f610_NeikiAnalytics
Size

3KB
MD5

29ede210207cbc8f495d57a861f6f610
SHA1

dd7cabf57b63413431606d6112d216bec87a5a46
SHA256

f9d91ff4d25162945e3d3cf666b4c9adabe82c584694f679a2a68480ca9e6249
SHA512

e9eb203ab6beef2fe592c64174ba26839ee5e08c6aca08e328f05a8163d514996664cc542c5137a47582ee1ae8b1ff475b8a139bae03253ec824b64e39a55c21

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29ede210207cbc8f495d57a861f6f610_NeikiAnalytics

Files

29ede210207cbc8f495d57a861f6f610_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

4592a51e6fe78d18da25a5d94b0153f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
MultiByteToWideChar
WaitForSingleObject
GetCommandLineA
ExitProcess
CloseHandle

advapi32

CreateProcessWithLogonW

Sections

.text
Size: 512B - Virtual size: 299B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ