6f4ef119a8e4d1f44e6ba7f1a3665230_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f4ef119a8e4d1f44e6ba7f1a3665230_NeikiAnalytics
Size

52KB
MD5

6f4ef119a8e4d1f44e6ba7f1a3665230
SHA1

0aaa2763d93736d168a9dbf62481a2ee9505f149
SHA256

acd098a1b03f4c788ca60bcc7e4c70f9c8099b7463da34adc308083f0bba3f9b
SHA512

96264e4cf591458a601c0fbe7623a5cfe34e637f870eeb3cfb8b1b13a1170b9fa3f0afa4c562bfd741ccda6106434e1648bd4065a11694ef0570cc165a557f16
SSDEEP

768:373OtJDvhzNsyXk58sCuSw26eWp12hzORvmGpYO1oN6bPqOqI9zA:3a/DvVNe58kSw2tw21ORvm7yqI98

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f4ef119a8e4d1f44e6ba7f1a3665230_NeikiAnalytics

Files

6f4ef119a8e4d1f44e6ba7f1a3665230_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

bbc712c81dbe5f313d887223f25de84e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetStartupInfoW
RtlUnwind
DecodePointer
EncodePointer
EnterCriticalSection
ExitProcess
GetACP
GetCPInfo
GetCurrentProcess
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetOEMCP
GetProcessHeap
GetSystemPowerStatus
HeapFree
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
OutputDebugStringW
SetLastError
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualProtect

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ