a818d10b0da33d4c978c306a8c400860_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a818d10b0da33d4c978c306a8c400860_NeikiAnalytics
Size

56KB
MD5

a818d10b0da33d4c978c306a8c400860
SHA1

4e8b6425b2d8cd3344010a19dfe6dd355f126061
SHA256

4a8315d16a85edc04194af3baabedcd48e4e5d9dc47019460e352d50d84bcbfa
SHA512

43a7f872e7150094d2792c6b09d396fa548b26faa5a21fa390631ddfb48f5956a6b82739ee605b5eee37a4400e2d8de596bd21605292ebfb1db4e1f04c255a3b
SSDEEP

768:7d0nz1AmT6CcVu/loVx73MZUY27T6wVAlonsEUpBxJR05Oe78rE2NMFr2XDKaI1e:7+Nhv476losB3505Oea5NMFrQKa4rtN+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a818d10b0da33d4c978c306a8c400860_NeikiAnalytics

Files

a818d10b0da33d4c978c306a8c400860_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

0363a4e4f57cf1939340f4eaf231e32f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterConsoleVDM
SetVolumeLabelA
SetFileAttributesTransactedW
InitializeContext
SetVolumeMountPointWStub
DeleteFiber
GetApplicationRestartSettings
BasepReportFault
TerminateJobObject
K32GetProcessMemoryInfo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE