3f2066eee95de7ff2a1d35875476d780_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f2066eee95de7ff2a1d35875476d780_NeikiAnalytics
Size

117KB
MD5

3f2066eee95de7ff2a1d35875476d780
SHA1

a621e25ef13055359a60f16de84554d2cb4cbd3a
SHA256

674f6c39dfa3845ff3c03788b03086b9dcd1cac12c474dfa4fe170a7b7f635af
SHA512

c8eff1573b8e65fecb06798bbf1f8d116036a6281353e198c2ba9915ef2d3ee45e0e5d76acdcc8bb52386855b0607d60d9fa782ab908b200553a8e8c0e401ea2
SSDEEP

3072:pVcATwr5LvlBd9JFj8qGuXINv8UeoACUU0c8UIu+:fW55T9JFj8qGu4uUICarUT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f2066eee95de7ff2a1d35875476d780_NeikiAnalytics

Files

3f2066eee95de7ff2a1d35875476d780_NeikiAnalytics
.exe windows:1 windows x64 arch:x64

3842bd257eb5a8450aeb7f0941bc4c55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CreateFileA
CloseHandle
CreateEventA
CreateFileMappingA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExitThread
GetCommandLineA
GetCurrentProcess
GetFileSize
GetModuleHandleA
GetProcAddress
GetStdHandle
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MapViewOfFile
QueryPerformanceCounter
QueryPerformanceFrequency
ReadFile
ResumeThread
SetEvent
SetPriorityClass
SetThreadAffinityMask
Sleep
UnmapViewOfFile
VirtualAlloc
VirtualFree
WaitForSingleObject
WriteFile

Sections

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE