1650762bca4b99fe6c4ced78c4c7c480_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1650762bca4b99fe6c4ced78c4c7c480_NeikiAnalytics
Size

234KB
MD5

1650762bca4b99fe6c4ced78c4c7c480
SHA1

267d2965675c37b8bdc6d198e819a7d7109308dc
SHA256

666de9fc2566dc4dc73732adbf3dd754c6a9ca04ba390e11da90a52513742fe7
SHA512

9c487fb2ee591b2646b8fc2724d97b21140cd88e5c2ae05c5093c49f3674e5fcef98d8371a20b02f6ce0901232ed58f66b57c4c9a85c651cae3c338a65814f4d
SSDEEP

6144:zPiLXQ75q7+fMdqpJPtBtMhPtLrobBKb0tgtU:zPiLXQVqS8S1wPt4bBntf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1650762bca4b99fe6c4ced78c4c7c480_NeikiAnalytics

Files

1650762bca4b99fe6c4ced78c4c7c480_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

3c6e5793e514214727b5614fbe758755

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualFree
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE