b3cd325a3bc04ed5246f8af4f61aefd0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3cd325a3bc04ed5246f8af4f61aefd0_NeikiAnalytics
Size

2.9MB
MD5

b3cd325a3bc04ed5246f8af4f61aefd0
SHA1

7574fba44f658efed898e335a191d092a77f35ba
SHA256

f1b7bd1ac1071f3b30a38ed5f40bb2f17379bc34167faad2d58aed14475b458d
SHA512

6c72ac4ce72d00002c296df8b5a98b1c9d2c928cc295f0af4d03e90313384e986e711b78c7280b3cb488f8467713296316886e9975a3e6fa6ec1b4f1905c9064
SSDEEP

49152:gDtWZZqhaK6zbfqdlhCIabjKoh9WKmUi6AjW/MUSdGRf3/ocY/D:DxxIabjKoh9WzjxAZRw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3cd325a3bc04ed5246f8af4f61aefd0_NeikiAnalytics

Files

b3cd325a3bc04ed5246f8af4f61aefd0_NeikiAnalytics
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

P:\Target\x86\ship\setupexe\x-none\liclua.pdb

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ