d128209189deac8b3e4b060b4015fa60_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d128209189deac8b3e4b060b4015fa60_NeikiAnalytics
Size

416KB
MD5

d128209189deac8b3e4b060b4015fa60
SHA1

085c2717bbf0e89bbd800084b798fc1249b4bb2b
SHA256

929a070ee6baf69cbb517684657a124ffae900176225170eeb6b2e3650bb4fda
SHA512

ed70c90cbde7d76c249ec475abae8db0c795a871bd53808765760a7089c31a273ee938d3f8b812772984a714001a623684d745ea1ec93d3c7a1bf171eddaf42a
SSDEEP

12288:aN0VPiyKVq219L9BghgwFuZ+byaGSw1plaWD7:aN+PiyKVr9CSwFc+lGSw1plaWH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d128209189deac8b3e4b060b4015fa60_NeikiAnalytics

Files

d128209189deac8b3e4b060b4015fa60_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

54caa478b8e7c65cd3969cbecac03943

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_except_handler3
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

GetModuleHandleA
VirtualAlloc
LoadLibraryA
ReadConsoleA
VirtualUnlock
GetDiskFreeSpaceA
GetNumberOfConsoleInputEvents
GetProcAddress
GetStartupInfoA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ