6949cf88ce544b084f79afe9e16769e0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6949cf88ce544b084f79afe9e16769e0_NeikiAnalytics
Size

4.9MB
MD5

6949cf88ce544b084f79afe9e16769e0
SHA1

ee621c4263a19003c0bf8e0ee34f100ed280246c
SHA256

7c3dfda0e8fc582b738bc236f3e50c67836e6624c3f8fb65860e91253ddcc90c
SHA512

98b130a5cf5caff8576dabf7a897dd4b658b2e39a13095db015c38e4ca21ab65fb769228de28e25f33e6bcb432ce4c43fbcc9899459a6fffe55670f536fa1311
SSDEEP

98304:XHPIxZFw4JfVfR4NHdFSxFilEFSvFSiPlEFSxvPKPlEFSxvPeEFSfEFSA:XHgxZHJPGrSfil+SdSiPl+SxPKPl+SxT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6949cf88ce544b084f79afe9e16769e0_NeikiAnalytics

Files

6949cf88ce544b084f79afe9e16769e0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.MPRESS1
Size: 1.5MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE