56fa311bfea0dac8c5713820176b9e60_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56fa311bfea0dac8c5713820176b9e60_NeikiAnalytics
Size

71KB
MD5

56fa311bfea0dac8c5713820176b9e60
SHA1

aa7a6e93081f7e72ddee16701efd3dfca335b28a
SHA256

de073f2a0aeb6b83b7dea10698b93510d27c891b2df8901dcd82dff5840cf2d6
SHA512

2a7e2e95e21951d5cb249ade9dd1bfb94491537a232e7dc4564e73a6d096c289d3b2ba4097e289ece4e88b4c4896fc1e958e7af3078b780e9e85695540119939
SSDEEP

1536:NNtIRxV1x+VQRrqkKxrRcwpmtaC8tWoIsgsCt79UD4dW38h:C6QRS5mtaUoIsgsCtBUD4Qsh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56fa311bfea0dac8c5713820176b9e60_NeikiAnalytics

Files

56fa311bfea0dac8c5713820176b9e60_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

c1c5ec3eb4c0f165bd54b0cebc6cff76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CancelIoEx
EscapeCommFunction
ExpungeConsoleCommandHistoryW
PeekConsoleInputA
BaseGenerateAppCompatData
PackageIdFromFullName
EnumResourceTypesExA
NlsEventDataDescCreate
timeGetDevCaps
SetThreadLocale

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 56KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE