79e96c51e35e6eb76a5725e3587828d0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79e96c51e35e6eb76a5725e3587828d0_NeikiAnalytics
Size

181KB
MD5

79e96c51e35e6eb76a5725e3587828d0
SHA1

81535c5f533215092debc76d05bf9d24e80bf283
SHA256

2a21dae4a2ae0c8a686e013db7dd83c8cfe9f27727a6d80b88eeb977909a5900
SHA512

5508b6801fc518ec14f13f07ab609956baabddba2470f308c265b57dffb7ab3e183610f2090063528ce04ddfccabee83658fa025718bb40e2f95ff7a51f721b8
SSDEEP

3072:mVOVK9crNdChBpaHwHjHDgy5fpjUthLI60ttH8Ra4KvqDUhYJ9f6zfvLsSiO:gq5dkpaHwH7kyzjUCttH8Ra7vNQoznLz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79e96c51e35e6eb76a5725e3587828d0_NeikiAnalytics

Files

79e96c51e35e6eb76a5725e3587828d0_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

c59bef6c2a3691b4b6e6254b06590a86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

mfc42

ord5356

msvcrt

strcspn

user32

wsprintfA

advapi32

LookupPrivilegeValueA

ws2_32

socket

shlwapi

PathIsDirectoryA

ole32

CoSetProxyBlanket

oleaut32

SafeArrayUnaccessData

msvcp60

?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z

netapi32

Netbios

Exports

Exports

InputFile
PrintFile
WriteErrorLog

Sections

.text
Size: 160KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE