476121f2bb08dc892c8eac32a0027d40_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

476121f2bb08dc892c8eac32a0027d40_NeikiAnalytics
Size

96KB
MD5

476121f2bb08dc892c8eac32a0027d40
SHA1

95be0760556f58e4401f18f5c5c944eaec9e2762
SHA256

66d7671206027a831cd9577034fde13e405e312c7d6387d56a5c5981433e916d
SHA512

2948abce160d22df79f5f47286fe69d29c40e1ab0e083752e005b8b9853e5792b6a24c1156b1ab75b0877738441d635945d74148be1513433f40ce61727e54dd
SSDEEP

1536:7/pcKFowHQ2GNLY+UI6/3/K9fCnImeFBXFmOEe0Iki3gnbio:7/pawwbLYLr/S9FIOk+geo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
476121f2bb08dc892c8eac32a0027d40_NeikiAnalytics

Files

476121f2bb08dc892c8eac32a0027d40_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e8b4c7662649cb440afca8c5b4f97417

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
_adjust_fdiv
__p__commode
__p__fmode
_initterm
__setusermatherr
_controlfp
__p___initenv
_XcptFilter
_exit
tolower
malloc
free
strncpy
printf
exit
strstr
__set_app_type
_except_handler3
_stricmp

kernel32

_lopen
_llseek
_lclose
_lread
_lcreat
_lwrite
MoveFileExA
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 762B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE