aa1df51aa4f988dd29f5357598f466c0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa1df51aa4f988dd29f5357598f466c0_NeikiAnalytics
Size

119KB
MD5

aa1df51aa4f988dd29f5357598f466c0
SHA1

347d6304ee14eadbea75548bf785e2242e6c2a17
SHA256

8338af64371cc01aef237b40da43a755956d711e3b4a4934e5111aac0d5f0720
SHA512

f4358ab0dd01a30058da9742736379ed438bbef186f4ebfa84e5990b7722ae2738117bdeeae5d9d89017e2ce3389a1f0051dc02095e21d419f861dc14e496190
SSDEEP

3072:GEbbbbvhb2eE8KN2NYOGHTGLYqpXHs2qxnC:GPb2NYOGzGUqp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa1df51aa4f988dd29f5357598f466c0_NeikiAnalytics

Files

aa1df51aa4f988dd29f5357598f466c0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

7637e892ca24d64eb5c25f06efa37cb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynW
GetConsoleAliasesW
QueryPerformanceCounter
WriteConsoleInputVDMW
GetTempPathA
ExitProcess
EnumSystemGeoID
OpenEventW
GetConsoleKeyboardLayoutNameA
FindNextVolumeMountPointW
EnumLanguageGroupLocalesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE