8a8c8c47fc19e48e435aea12271a36e0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a8c8c47fc19e48e435aea12271a36e0_NeikiAnalytics
Size

71KB
MD5

8a8c8c47fc19e48e435aea12271a36e0
SHA1

ff0acd25fd897a803a50dca80619dd8de6187bb5
SHA256

7c494934e3cfdbf8cdf0ad25b4c0c4babf1bde3b44c9f6bc4c4f9f92a5b64e5d
SHA512

9cb2739aaeea3f89fb8d9882d207a7329f83cfa75ca1b341b0b3efdd1ad0fa8cf9dee87c2747197870d48c85adc3169df5f00d7488210213be7e86c108c7403d
SSDEEP

1536:XkLRpdjimMCMGlyLa4EVKC9V6uKP+YKWwoV3VABFvDF7xoYu:aJl6a5ECauKZKVoV32B2b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a8c8c47fc19e48e435aea12271a36e0_NeikiAnalytics

Files

8a8c8c47fc19e48e435aea12271a36e0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

aa62d352a51a64be7eb0c5efa5e1ff5e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BindIoCompletionCallback
GetStringTypeExA
CheckForReadOnlyResourceFilter
CopyFileExW
Module32Next
SetThreadErrorMode
WerpLaunchAeDebug
CopyFileTransactedA
GetFirmwareEnvironmentVariableExA
DelayLoadFailureHook

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 56KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE