7bade5503c5b8e345822f9d1366f7ea0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7bade5503c5b8e345822f9d1366f7ea0_NeikiAnalytics
Size

119KB
MD5

7bade5503c5b8e345822f9d1366f7ea0
SHA1

7f0f6835403577e8cd648c7a92b3baf2a9040cc1
SHA256

67238ae2ae2f5bd8ba677d1ff64168b3f1fc5987fdd12170dee25d628a833347
SHA512

04d9e05e6cce273733c3dabdd97701394f7b9452ee934b4893e08dc3e1ef382cd3336dcb575928cfef5a5d859ab175a71572c2171016a054d7953d04c02764ca
SSDEEP

3072:zTVsMfiXIjMQ1musLtPfbChgKU+RJhXOkYpr7A:3XfiXIV1musZnbwUEJTYpI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7bade5503c5b8e345822f9d1366f7ea0_NeikiAnalytics

Files

7bade5503c5b8e345822f9d1366f7ea0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

4455d7230abde22cf850335fd1b8be95

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLocaleInfoA
FindVolumeClose
UnregisterBadMemoryNotification
NtVdm64CreateProcessInternalW
InterlockedPushEntrySList
DnsHostnameToComputerNameA
SetProtectedPolicy
BaseFlushAppcompatCache
CopyLZFile

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE