2ce9ba5bd3a7a68943a6c1e6242eaa20_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ce9ba5bd3a7a68943a6c1e6242eaa20_NeikiAnalytics
Size

506KB
MD5

2ce9ba5bd3a7a68943a6c1e6242eaa20
SHA1

85b772613a2b713b5e4f9c5c71832f10589f8951
SHA256

a3f6c0a736a98bc6c2348e8d2b229d3b5e6262ec67861ef3b7a089d510cf5fe8
SHA512

d1b7d5f8a9aa79e3641e1359ff3cb40678f1e5094db21a68ef6ee1fc6a0723cc87c537de000da8940a885ee7f11abcfbbb3f742f8edc8cc07e7f2c8b0459d4cb
SSDEEP

6144:3L1d8M9mYDOr/eH01CI9eLQp4AWv45V0HpA5dNEXaEuvuB0QDt0PxNHZFF2aPP1c:7UnGUEIeQpsET5GaEfB0Qx0P/ne5v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ce9ba5bd3a7a68943a6c1e6242eaa20_NeikiAnalytics

Files

2ce9ba5bd3a7a68943a6c1e6242eaa20_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 454KB - Virtual size: 504KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE