2b37164a43d338cc5ea2ca0bf24cbaf0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b37164a43d338cc5ea2ca0bf24cbaf0_NeikiAnalytics
Size

100KB
MD5

2b37164a43d338cc5ea2ca0bf24cbaf0
SHA1

9bf969c4c43aaa17ec7c3ba7e508999cf7b9b2df
SHA256

9cf5fbee46aea8dd2bbeb7ab8db565367ec7e72e9af9f08062c1dbb6860f597e
SHA512

bf7daf1f8297ac5030e5fb53c1e24d62c2d809f62159710cd2d5bc4a34e33a5bc9e6a56876f13523dca13cc5ab6f3e2a7ae50ff2f49c7fd9297e191d386c3844
SSDEEP

1536:IUYftTYGHYPo+Dr6qwp1A290RpFls5iCb2uUg85:jMtDUo6uNpbyFSbhi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b37164a43d338cc5ea2ca0bf24cbaf0_NeikiAnalytics

Files

2b37164a43d338cc5ea2ca0bf24cbaf0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

5b0b760e5967ced50fae28a81f79dc47

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetTickCount
GetSystemInfo
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ