db5a43c16857457612698586c93fd130_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db5a43c16857457612698586c93fd130_NeikiAnalytics
Size

54KB
MD5

db5a43c16857457612698586c93fd130
SHA1

2768e8291e2abe8b57485dfdd79872ba8ff8563c
SHA256

fa944d7c64c87d89a94c25c818af77703a08f40d7ca286dd7f5f831fc35af2bf
SHA512

01e2ea0dd7aa14bb25a4914e497a3715832e2357a7b2a785c57939b842338a939cc07c80449997f30494e8d7af4fb60cffea290a9c9d4e72d7ec55e751e94aa3
SSDEEP

768:OWj4bdHPRUS6FO2yzt6eKLsd+7hJy3M2l8aU8cptWqm9ad:r4hHyS6FObzHWsuAA8wWqnd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db5a43c16857457612698586c93fd130_NeikiAnalytics

Files

db5a43c16857457612698586c93fd130_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

dd07b306c534aca83262f92cc34e4a87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

ole32

OleInitialize
OleUninitialize
CoGetClassObject

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ