612a829fc4f5b61fa6b2b4cbdb033290_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

612a829fc4f5b61fa6b2b4cbdb033290_NeikiAnalytics
Size

1.5MB
MD5

612a829fc4f5b61fa6b2b4cbdb033290
SHA1

62ae505aa8da5e900c43c690a5011c3e108b1831
SHA256

40cbf36576c1643c2b1b30447ab8293898d60902781d53611b2870620a5c5810
SHA512

9efa8342385243c253a670e5ff51dfec722e1b6e5c83fc4025ac4b9b09d46490c06d28316aacfee04eecd955606fde8971985178fa25b4ecb02b116e127b8d3c
SSDEEP

49152:S5ffKkEbe+DJmrHaoj4tqaANhiidvHHDOL/Z:hk+jmOY4EaMV9DO7Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
612a829fc4f5b61fa6b2b4cbdb033290_NeikiAnalytics

Files

612a829fc4f5b61fa6b2b4cbdb033290_NeikiAnalytics
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

PPS0
Size: - Virtual size: 2.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PPS1
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PPS2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE