cb64977cfef9543fae2e14dfc3adf040_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb64977cfef9543fae2e14dfc3adf040_NeikiAnalytics
Size

948KB
MD5

cb64977cfef9543fae2e14dfc3adf040
SHA1

94dcbbc9d7b7f311a7542a0481e53a22b027f327
SHA256

138901554b0a32686892895f1fe4c639c578a83ae5ca12f2bd8f49d7a53a29e6
SHA512

8724b37abb5da2a2bb2c8801afa9f0e2e3c282ba035ba70a629f6530f13ffd9f94c2f84095e81692775e15ad84d44762cf140557748b2693ed4b77398301599e
SSDEEP

12288:GSCfWjlqUF4YGa0MSEeiGrJD7FA5lqUF4YGa0MSEeiGr:GPWAG4YGeAxASG4YGe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb64977cfef9543fae2e14dfc3adf040_NeikiAnalytics

Files

cb64977cfef9543fae2e14dfc3adf040_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

44ff0a852b40289ff2085cc27e8d026a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleW
GetStartupInfoW
GetCommandLineW
SetCurrentDirectoryW
GetModuleFileNameW
GetProcAddress
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
LoadLibraryA

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 528KB - Virtual size: 526KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 400KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ