79c3729ed29bb39b04c8cda7375c4a20_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79c3729ed29bb39b04c8cda7375c4a20_NeikiAnalytics
Size

3.6MB
MD5

79c3729ed29bb39b04c8cda7375c4a20
SHA1

118b6a7ba6e4920f45c06b69062d24045694dc98
SHA256

2e066eb85e42a73202f761f46bdeec8f5e63548b2bf47e93c954629fee0b21e3
SHA512

f7189b4f6f31c88c023fed84789d49b05cf017ed6af2b4ab8dd18e494846719a77172df176469f44c5e057b93b34907bdf61973f0c2cb505a2ddbe8946cd6201
SSDEEP

98304:eA+YDIlTmTdvnBp/uzJzTLYZVIFEIjiZgypRfSQuqiZH0wVtzPSQ5npHQ1ky:eA+YDdIhWgORfS6Q5npw/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79c3729ed29bb39b04c8cda7375c4a20_NeikiAnalytics

Files

79c3729ed29bb39b04c8cda7375c4a20_NeikiAnalytics
.exe .js windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 37KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 625KB - Virtual size: 625KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ