a68fafcd5ab74c7c475be1fd762acb70_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a68fafcd5ab74c7c475be1fd762acb70_NeikiAnalytics
Size

320KB
MD5

a68fafcd5ab74c7c475be1fd762acb70
SHA1

3481cf61e0771242302268652badb4f2efeea245
SHA256

ed032d18f1fd7c18b9df5f49a63cea2a00560181fc45761dad105e2b6422d54e
SHA512

61e99e311a3650675864d59920286814ddb767cd9ef55f7dd122bd642daffffad061a3e1c3654476931967a5438fb19ccfae052b185e1f99e935add8fd6f01d3
SSDEEP

6144:YMNOym33H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:FNOy82EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a68fafcd5ab74c7c475be1fd762acb70_NeikiAnalytics

Files

a68fafcd5ab74c7c475be1fd762acb70_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

356935e118809ec3c5cc532e375eeab7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMemoryResourceNotification
SetCommConfig
GetConsoleHardwareState
GetHandleInformation
VirtualAlloc
EnumResourceTypesA
SetInformationJobObject
DeactivateActCtx
DeleteAtom
DeleteTimerQueueEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE