b0ef1af344ddc437abcad584fc94cb90_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0ef1af344ddc437abcad584fc94cb90_NeikiAnalytics
Size

325KB
MD5

b0ef1af344ddc437abcad584fc94cb90
SHA1

bb024270d9d3d91ae1fe7ebbc3f3229567835149
SHA256

bb0eaf706ff875484dc043956b473a83178ab1350ffb01f1f91b7b18d1689556
SHA512

84fad1691f5286914f7426b0d582f4f689adf7bfc221d5cba41a234778826d3a22b06eabbade5189c76073136bf514aa4d3699c2513753ac9143013b9a856ee4
SSDEEP

6144:Zt58sOQf6lghcnBBLf9tQiepbGjhboOBnSusSTUvXBirw/AwFF1x:ZtisOQf6lXbpt/kbGjhV5AvXxHFx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0ef1af344ddc437abcad584fc94cb90_NeikiAnalytics

Files

b0ef1af344ddc437abcad584fc94cb90_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

06ef33a1c45fdabdfa5b6e2e08bce5aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadCursorW

advapi32

RegQueryValueExW

shell32

ShellExecuteA

ws2_32

htonl

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 289KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE