Static task
static1
General
-
Target
c751a92f994f48bd649ba49dd93d5930_NeikiAnalytics
-
Size
1.8MB
-
MD5
c751a92f994f48bd649ba49dd93d5930
-
SHA1
44b7e2fa7f120f130e57620ae0c44399574d7272
-
SHA256
e21b8e3512ade3cd3cc8fdd64f0a8c611511b1d1bdde9da2f0bc54f0f1aa338b
-
SHA512
dba3e7c36d5a29ac4d2cc3401f31e6e0a7787608ce83d3826b0837c99502d7a830bce552bc2936a648983e0e01aa7264afaa4e7aa17cd879cc574787880b5243
-
SSDEEP
49152:c4AVlITwNJekqw0YqJ5tdrhEpFDZkJP19lH40+MO:9AlgNkqw0YqJ5vGvNiPFHr8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c751a92f994f48bd649ba49dd93d5930_NeikiAnalytics
Files
-
c751a92f994f48bd649ba49dd93d5930_NeikiAnalytics.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gecbwiqd Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yimbebon Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE