7e67c74fcba321379dba72ab59efd3d0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7e67c74fcba321379dba72ab59efd3d0_NeikiAnalytics
Size

71KB
MD5

7e67c74fcba321379dba72ab59efd3d0
SHA1

78f8cf26674fa629d91bde12d709fba76a65dbe5
SHA256

f2a4093b3e0822d41e47af99391184f87ffa251019b36db0975f121d726f56ca
SHA512

36d3d613d95b8e308e5f5d8d8cfcff971166d50b2585e0a44291c28abc10ba70086d6ed61fe05c3f66b2796bdb6add7cc4d296a8ad69cc3b4a3f244a03978713
SSDEEP

1536:ES/TrFgXM+vQ/5VSJsTqLodEJ2ZyK/ndzM3sgotmttINWFbrUkln/yR:ESGdQ/Xms5Zh/nSc8tn1l/yR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7e67c74fcba321379dba72ab59efd3d0_NeikiAnalytics

Files

7e67c74fcba321379dba72ab59efd3d0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

a51b2dbfb1168d5fd668bbbcf3d1d4d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseElevationPostProcessing
SetConsoleDisplayMode
RegQueryInfoKeyW
BaseIsAppcompatInfrastructureDisabled
WriteConsoleInputVDMW
lstrcpyA
IsNLSDefinedString
GetNumaNodeNumberFromHandle
Wow64Transition

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 56KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE