3f81848d05e54417d490655a57e5a1a0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f81848d05e54417d490655a57e5a1a0_NeikiAnalytics
Size

119KB
MD5

3f81848d05e54417d490655a57e5a1a0
SHA1

44a9c55b6e00561fa3c4c04cd8876275b1af6b29
SHA256

6ce084964fc514af0d6d5c393be672a982f38c1a6df7d01af843cad9aac25688
SHA512

e1fe76cd5f73a25cee548f61f453889cd13bad8fd9a2bd42210cc06a134ab5731e72a7ce140c13afdd8a3950368a7a4fee46c8a9daa0fa9eb2c8ffad314a34d8
SSDEEP

3072:jaO2GmufmNruDFfbBbztpG47ZufSXOiAard1OZs7p/Uk5MpvM:jaO2TNruDFjLpG0ZufSXOiAard1OMp//

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f81848d05e54417d490655a57e5a1a0_NeikiAnalytics

Files

3f81848d05e54417d490655a57e5a1a0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

4e4ffa8b89a26378e22f36ff1094af60

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeMountPointA
GetSystemRegistryQuota
WriteProfileStringW
SetNamedPipeAttribute
OpenProfileUserMapping
GetStringTypeExA
CreateActCtxW
GlobalWire
PssWalkMarkerRewind
TerminateThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE