a00e51ee1695bdb8ea61517dff84d6b0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a00e51ee1695bdb8ea61517dff84d6b0_NeikiAnalytics
Size

706KB
MD5

a00e51ee1695bdb8ea61517dff84d6b0
SHA1

e35cb7b908aa8beee434ea2c4264a6fc9df98d77
SHA256

954ab9120db815b45671eebeb66cb3cd513db071fa91c3112788c3f5234bf7f8
SHA512

a577e88c6d9c9245f8824976e7b00113b31972fb7864cdf02cd43e3db01c57274786cb9f9bd4d7f15bed94f8b035a502d4e73ccfe8038decd87a84edbae72b7f
SSDEEP

12288:7iBmMJPkUZcPAD/A6xaDsVA4c2X0rF32gvwheH/DP3nRAsUgafX8k:7pUZiQxaDsy4c2Er3vHfOg8j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a00e51ee1695bdb8ea61517dff84d6b0_NeikiAnalytics

Files

a00e51ee1695bdb8ea61517dff84d6b0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

2d9e4dfb9660ece27ef87af7dde2648e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
QueryPerformanceCounter
HeapDestroy
Sleep
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE