2d112b943ab3649bf32ef2fb31662960_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d112b943ab3649bf32ef2fb31662960_NeikiAnalytics
Size

3.6MB
MD5

2d112b943ab3649bf32ef2fb31662960
SHA1

9060aad663d3f690056b6865dd18b56a28d45967
SHA256

50741e0037e3b6610fb11ce5ccf0cfa02ed9b12211455ab4a6b6ba1c51de1b2f
SHA512

34441af82eff851ed93113aca37bff4f3a8c61fc270cf6b9ad90309bf855ca0f27a7ea90f67bdcabf72681b5c5598aa9096a2ccd95775400c37bd2b8f88e022a
SSDEEP

98304:t+RYNAKvkTgXuquveY+W2o8oT3ezMrl9cekcHhXh9HJUiWUXsmqsqzl87aW7tPWD:kmAVI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d112b943ab3649bf32ef2fb31662960_NeikiAnalytics

Files

2d112b943ab3649bf32ef2fb31662960_NeikiAnalytics
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

appvlp.pdb

Sections

.text
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 180B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ