9c03394c35cb8dc4ef41bf98ead7ef50_NeikiAnalytics | Triage

Sharing

General

Target

9c03394c35cb8dc4ef41bf98ead7ef50_NeikiAnalytics
Size

4KB
MD5

9c03394c35cb8dc4ef41bf98ead7ef50
SHA1

cd5d7c5dc6ceb8031e9f4dd6ef7aa12d66cc74d9
SHA256

a10bd6163b782f372cdaf1efd09586e789502d057b411ad77f03ec26978a92f9
SHA512

fe1d056bec4fa49308e3cae917f7f49322eafc58be654a07e51e9b49cf809a113c375f6247e804af90d63951777c82c06294cfa4ae680822b09ccdfdb174c4bd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c03394c35cb8dc4ef41bf98ead7ef50_NeikiAnalytics

Files

9c03394c35cb8dc4ef41bf98ead7ef50_NeikiAnalytics
.exe windows:4 windows x64 arch:x64

418044603b286f83c4f882e046f88152

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateProcessW
GetCommandLineW
GetExitCodeProcess
GetModuleFileNameW
GetProcessHeap
GetStartupInfoW
GetStdHandle
HeapAlloc
WaitForSingleObject
WriteFile

Sections

.text
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE