dd2dfad6787c4f29c237504e16e5c970_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd2dfad6787c4f29c237504e16e5c970_NeikiAnalytics
Size

80KB
MD5

dd2dfad6787c4f29c237504e16e5c970
SHA1

08cae2b1de49ba977a16968800f33c485792380f
SHA256

439d49c8b4f64b5dd03cc9c4913dfe8f5eddb6bc78825c09e7a7a59d99c01e37
SHA512

89a534c56608631a08fe22f2b7385c91772760bcfdbb34d2c0f1bc0cf8f0361d91beb70a7aa2ad4e9702d8d2174c0c8fc980074407d8daea2dc16dac3cf4e2ac
SSDEEP

768:TXCru/f9IwSE6zy4n8uZ5tUXMJ+fROUmELY2glEbM3j+rd+fpRiTWNReOOR50b3F:Tz1yzy48untU8fOMEI3jyYfPiuOfuF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd2dfad6787c4f29c237504e16e5c970_NeikiAnalytics

Files

dd2dfad6787c4f29c237504e16e5c970_NeikiAnalytics
.exe .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE