46f1d997d7e1c8388f8cb35ddafe5090_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46f1d997d7e1c8388f8cb35ddafe5090_NeikiAnalytics
Size

99KB
MD5

46f1d997d7e1c8388f8cb35ddafe5090
SHA1

e5ba50b3c02751d93385abdcb284d2c5d90c6e54
SHA256

dc9fa0ad418aabb4137e2679c07461555a89fe8268510ef35c984d5d1408ca97
SHA512

ff01128e43b6743f0ef4e099c92b4990f6a86b13d79c8d2ef1de66fb28224aed77487a99f153210e0a6f619631bdfa62ebd301000d23fa6fa067dddc821c110e
SSDEEP

3072:4lUBZCcLqItvEa8Sk5SCsu2oh40kv3VucVEB:4W7CcNk5Fsu6vFuP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46f1d997d7e1c8388f8cb35ddafe5090_NeikiAnalytics

Files

46f1d997d7e1c8388f8cb35ddafe5090_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

894e0687d5dd05d19f8c74aad5e70703

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadLocale
CreateActCtxA
_hwrite
GetLocalTime
WriteConsoleA
GetNamedPipeServerSessionId
ActivateActCtxWorker
SetProcessWorkingSetSize
WritePrivateProfileSectionA
OpenProfileUserMapping

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 41KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE