c84bcbed773a7464cda239a37baf00e0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c84bcbed773a7464cda239a37baf00e0_NeikiAnalytics
Size

482KB
MD5

c84bcbed773a7464cda239a37baf00e0
SHA1

936f341a5117afddaa8912cc8fb2c9fdf1d52234
SHA256

e25a7775d2fdd5f6e0175ed96cd0180367fa8da57c9c5bc9818a95c73fc87740
SHA512

2d54554e9d423dc77c39b604793aa6b2c3d7a46641e2182c62c4081ee244e9a3cf28bf7c379a593b87f282f3bdef3fe7b395915521b1cc18b1de5e0e0fa76d85
SSDEEP

12288:yPd8fBT+RkEulOYyZCnWjXjJsj3C1WW8lTJo:yIp+RFuDyZCnUzJsG1WW8lFo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c84bcbed773a7464cda239a37baf00e0_NeikiAnalytics

Files

c84bcbed773a7464cda239a37baf00e0_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 451KB - Virtual size: 500KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE