42a5a295791b06110846c935fdf30eb0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42a5a295791b06110846c935fdf30eb0_NeikiAnalytics
Size

64KB
MD5

42a5a295791b06110846c935fdf30eb0
SHA1

7dd2c3c04e99af277df0705f21d4ec65e81cb6f1
SHA256

8df8c6a39b41cd8f1fdad1b3120ed5f6bd61dc711e4836437fdf1e478a31c99c
SHA512

9cfdf2f29504586c4c30b1a5a1e64b8ee47520cb7caec11b46bb7a34e4b38c91553f15386722057454c814d38fa23b02466cffab37086e46c423b267b3aff2e1
SSDEEP

768:zTAiYUVaQDKVSputCPsED3VK2+ZtyOjgO4r9vFAg2rqcjeZ8GswSD/EjmEx7:HAqamKwugYTjipvF2PeoEyE9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42a5a295791b06110846c935fdf30eb0_NeikiAnalytics

Files

42a5a295791b06110846c935fdf30eb0_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

b54757880e34d193f6c36b5f50a2be11

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

mscms

CreateColorTransformW
CreateProfileFromLogColorSpaceW
CreateDeviceLinkProfile

gdi32

SetWindowOrgEx
GetWindowOrgEx
CreateDCA
CheckColorsInGamut

kernel32

ExitProcess
GetConsoleCursorInfo
GetProcAddress
GetModuleHandleW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ