2c0ed1273a87599fda33410fd81a5a20_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c0ed1273a87599fda33410fd81a5a20_NeikiAnalytics
Size

53KB
MD5

2c0ed1273a87599fda33410fd81a5a20
SHA1

2d3bfa8c6a4649db7ab04f1b612d8a0592073b08
SHA256

e592773c9d98e147aed61d16ddfacd477b8aa66edbf17cc16d594bd2a1f7134b
SHA512

02f650f88ea4b9816b76e053a3e5f85b321de4e4f708f359dbd526d92599a50bf16168ff0008cfb3b28c0737a0f16201271b4467c5e0d85d9360a3c0a47140df
SSDEEP

768:euN+gX55V7gbGy++cnk3Z1FCgq/gFCpQyMM7C+/Dsbc+TgH:lNLX5bzS12g27NIE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c0ed1273a87599fda33410fd81a5a20_NeikiAnalytics

Files

2c0ed1273a87599fda33410fd81a5a20_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

1ff5f432434633aab8fc15061ce55a13

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
DispatchMessageA
CreateWindowExA
DefWindowProcA
SendMessageA
RegisterClassA

kernel32

ExitProcess
CreateFileA
GetModuleHandleA
GetStartupInfoA
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue

gdi32

GetStockObject

comctl32

InitCommonControlsEx

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ