132fe51dcd0bfdf53d082e5fdca71500_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

132fe51dcd0bfdf53d082e5fdca71500_NeikiAnalytics
Size

30KB
MD5

132fe51dcd0bfdf53d082e5fdca71500
SHA1

1d7e447d57cda6034fd5c646cddd5e59591140a5
SHA256

e888c0b54b2f80d19f5393c79a182c56b581fe23a43a9c12376866a038f3c9d1
SHA512

3b5d0652a5273f87ceb60893424e8408aa989d3a0ffbc5cfaa0513e8f353ba935db8e33085744f5a0cb8a85a66c007847872aefc18e556e0b766b391b833c1ed
SSDEEP

384:ry26utT4Dq8RX5OSNyCdvQ0KKsGbcH5wk50P/miY0sRxHgHhbi1g9Vwj5FplYk2g:G26uYzQhmWSm8/mjHgH9OAwj5FplC9m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
132fe51dcd0bfdf53d082e5fdca71500_NeikiAnalytics

Files

132fe51dcd0bfdf53d082e5fdca71500_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

4031e5d49f34c1eef26fe2b91cee7b63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetCommandLineA
GetModuleHandleA
LoadResource
LockResource
SizeofResource
ExitProcess

user32

CreateWindowExA
DefWindowProcA
DispatchMessageA
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassExA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ