464783c495b8ddabc8c0f4b8bd37aa00_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

464783c495b8ddabc8c0f4b8bd37aa00_NeikiAnalytics
Size

96KB
MD5

464783c495b8ddabc8c0f4b8bd37aa00
SHA1

6b54cfaaa1714076e51aab4f1f18ddf801084cf9
SHA256

dba0ab00eb145c5b1f147a7c5a3139326fc1c027a15f90ac99043b9015203744
SHA512

42282299580525d83599536d2dcfb2e58d71868757af5d5af1cb65e21329dd6537ce26c29ddd3643546d975b30521dda567a5c9e1d85b947acbce9054a63f88c
SSDEEP

1536:hFdqUbkBtBmVkGtx0DzaM0uMjfLX6FebbZJZdSG4y/plrG993l:XdqUbkXBVGtxKWMaXuUbZzoG4opA9V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
464783c495b8ddabc8c0f4b8bd37aa00_NeikiAnalytics

Files

464783c495b8ddabc8c0f4b8bd37aa00_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e8b4c7662649cb440afca8c5b4f97417

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
_adjust_fdiv
__p__commode
__p__fmode
_initterm
__setusermatherr
_controlfp
__p___initenv
_XcptFilter
_exit
tolower
malloc
free
strncpy
printf
exit
strstr
__set_app_type
_except_handler3
_stricmp

kernel32

_lopen
_llseek
_lclose
_lread
_lcreat
_lwrite
MoveFileExA
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 762B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE