49ed76099aba60836442f8df81a705c0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49ed76099aba60836442f8df81a705c0_NeikiAnalytics
Size

26KB
MD5

49ed76099aba60836442f8df81a705c0
SHA1

ddc2bb28289cbca5f4fac652e8c85c7a60877783
SHA256

25579439a5564d10083d3fe2c16b83edd0ac5d37187572e2d0cc24defb5983b1
SHA512

88e3794803838c34b3eab90a63b8c501d74851fd4ced4322bb12af7f7ec2945a0fe37411c5e9b30d7b5fc2972423d5fc91b3cd42b6f3cc7828726bd06d3e4265
SSDEEP

384:UMp3HU08dJlM1jpj0Z3g+4tdmuJc1PbJkOUcFnj+r9x5jHGzMg:UEHUblMVZ3kJOCax2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49ed76099aba60836442f8df81a705c0_NeikiAnalytics

Files

49ed76099aba60836442f8df81a705c0_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

30c213a1468a81a73c565e04024cebe9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

kernel32

GetModuleHandleW
GetModuleHandleA
ExitProcess

Sections

.text
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ