4848fe5de9b8a787f7e2b4a87e25d760_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4848fe5de9b8a787f7e2b4a87e25d760_NeikiAnalytics
Size

50KB
MD5

4848fe5de9b8a787f7e2b4a87e25d760
SHA1

dce7b69b105c8836383d3443b7b80faa0df8e95b
SHA256

3f6bfc6898d100944b68d75d5a5913fa06605dfdfcfa97aba814be666ce49a0c
SHA512

54c74fb3419df18dbcdaa9182b51b3ee8e2c4d716085ad1078faf15d7ee7c00ff6b3adbdfe6a4c7070561875a781b1825d7b14a48f05b5cbe8863e12608ffc4a
SSDEEP

768:+zdjjormQbE+7s+KNrhb7Ubxk7ronv1wtYv8av4Sn/230C/v1fd5FhwSRYPBj0s:+zpj4/bEDVgV8ro9QYlRy1ffXRR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4848fe5de9b8a787f7e2b4a87e25d760_NeikiAnalytics

Files

4848fe5de9b8a787f7e2b4a87e25d760_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE