19832bfba363085d5a1e0bacf95501d0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19832bfba363085d5a1e0bacf95501d0_NeikiAnalytics
Size

5KB
MD5

19832bfba363085d5a1e0bacf95501d0
SHA1

7a9579d6edd40906c2248cba5050e63b0ba7be39
SHA256

d950eb804bab23f131c1edb58087761ec92b846b01de8232c94ee3b4149ae44c
SHA512

1812165bda5927874ae48a95198e64468f98c86afa1ae1d00a2a3c2b8b9a4580d2a2c8de3917ba59eb3ab645ef4f72551b0ba9ba6dbefd7693d8f04695669ccb
SSDEEP

48:SxlXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7tJRuqSxp:yWLkFfNnOKYloIQ2pm2pbYS3xE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19832bfba363085d5a1e0bacf95501d0_NeikiAnalytics

Files

19832bfba363085d5a1e0bacf95501d0_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ