6d5bf9eae958e698b69a2fda73383970_NeikiAnalytics | Triage

Sharing

General

Target

6d5bf9eae958e698b69a2fda73383970_NeikiAnalytics
Size

119KB
MD5

6d5bf9eae958e698b69a2fda73383970
SHA1

f5f7b80d5243d1e72c0cec2dd210fe4cc67a7452
SHA256

720737309da57f2c2dcf8158416533ddd066e7b5a8f7b5e96bb428c2bd9b9253
SHA512

0803d4a94205a38b273925c7aeaa77dce1f34f38ee3ec686e1179513ab91ef66b2a615b88ecc135f9baa233c309b41b490c14f22a44a66986f61d6ce8d05ac64
SSDEEP

3072:uQSB/DCKvWfntELxAkAfHr3f4SLAwU2eu1djqQNU:3SBmKvW/tELxoL3QGKCtBU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d5bf9eae958e698b69a2fda73383970_NeikiAnalytics

Files

6d5bf9eae958e698b69a2fda73383970_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

6fceb78c4e81efcdfc3d5b61478e9366

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCommTimeouts
FillConsoleOutputCharacterW
QueryIoRateControlInformationJobObject
GetMaximumProcessorGroupCount
IsDebuggerPresent
K32GetDeviceDriverFileNameW
AppPolicyGetLifecycleManagement
GetConsoleCursorMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE