4a4f2da728f1ff11e2a957f53a478eb0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a4f2da728f1ff11e2a957f53a478eb0_NeikiAnalytics
Size

71KB
MD5

4a4f2da728f1ff11e2a957f53a478eb0
SHA1

955c9c9ec501243b0692c14436a808ebf1a7f4f4
SHA256

9a43d4ee65c03fe8bcb2ade9e24881f6f70fb305bc8833c4012e79c2e6d48448
SHA512

5193d37ee292cf42a7ffffce826f8c6ae7c4f69eadeb63c1cfc81619f578e5ad44936e48af6d057a3f9fc06f83dfe9155924dc5203f3def659f082997932a1e3
SSDEEP

1536:cTrm1WzSiThAC3nvdxjiNv4bFJFQZu+qAMHGoKeGcbATojk:wmIvXvdxjiV4rFQZu+fVsGAAsw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a4f2da728f1ff11e2a957f53a478eb0_NeikiAnalytics

Files

4a4f2da728f1ff11e2a957f53a478eb0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

0b294398a5f2747ad314bcb2b7bec499

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
CreateFiber
WerRegisterExcludedMemoryBlock
GetFileAttributesExA
RegDeleteTreeA
Module32Next
GetConsoleInputExeNameA
RequestWakeupLatency
RegEnumKeyExA
QuirkIsEnabledForPackage2Worker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 56KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE