1b2c5ede3c140748ab280ff580eed040_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b2c5ede3c140748ab280ff580eed040_NeikiAnalytics
Size

944KB
MD5

1b2c5ede3c140748ab280ff580eed040
SHA1

04e838fed38236beb2fd2a6a6b68a36633b09d70
SHA256

7aea9f474a59f3d3e8a9076cf9ff153b50ea03d3738cf6269a42fca69ff59cfe
SHA512

d00a1a5131b622751420c50de6d3dafb739718b4a5b63d0d1912126acbea53d2aecf98579da36db3601303734256d11b05c7072e9789933837375adb7e7292f8
SSDEEP

24576:w4R4jZ5drmn1ylDmr6mzSwNqXuKbahgmxhVF4HY9/:w4qjLdaMor6wAXungKVF449

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b2c5ede3c140748ab280ff580eed040_NeikiAnalytics

Files

1b2c5ede3c140748ab280ff580eed040_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 327KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ