512b7aa824ee74e4ec92b1d1b20f7ca0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

512b7aa824ee74e4ec92b1d1b20f7ca0_NeikiAnalytics
Size

99KB
MD5

512b7aa824ee74e4ec92b1d1b20f7ca0
SHA1

be903e9c62cae538e538af3ed795d956d8aa9a6d
SHA256

0f405a4a84e437163d24a2727ccd071d7d9f21c25780f2ca31f826ea8a3da051
SHA512

d1aad564665142f1bff9b0a7880d741a357e0abeca81e78075f2768503fde130953c7988c3d159f399b2a3ec233c8e1e54be25a87c4102d07a420ee557e47a7d
SSDEEP

3072:OC8/NtUr4HtrckkS5SCsu2oh40kv3VucVEB:O/UUHB5Fsu6vFuP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
512b7aa824ee74e4ec92b1d1b20f7ca0_NeikiAnalytics

Files

512b7aa824ee74e4ec92b1d1b20f7ca0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

aa4aefdc14441f5a480c7c537c89596e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameExA
ReadFile
PeekConsoleInputW
FindNextFileW
QueryActCtxSettingsW
lstrlen
FindActCtxSectionGuidWorker
WriteConsoleOutputA
AppPolicyGetCreateFileAccess
SetCalendarInfoW
GetProcessHandleCount

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 41KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE