d581c61ab4d08b970f2eb922a1f094b0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d581c61ab4d08b970f2eb922a1f094b0_NeikiAnalytics
Size

41KB
MD5

d581c61ab4d08b970f2eb922a1f094b0
SHA1

ceeb084a8712e35514f1f2a6e302aa473340b147
SHA256

d164566dda1d8e15a287179e114fe1796aabdf7120a1e4788e6dabe4f1c0e911
SHA512

51e18db58763cd7e1f1e286e6e591ccb2ba963f6cc932b0836a574a22b4c6a35e189edf9bdd0f94aaa35650dc3adc94f504ddca4dd8c03e780fc0ea44ec8834e
SSDEEP

384:6J3ZVovP2iVRExgXnZaumBxSMdcoTrSogBJudB9t3OWmFrBop78acLh:61SRDXnZZJudB9tM3oZcLh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d581c61ab4d08b970f2eb922a1f094b0_NeikiAnalytics

Files

d581c61ab4d08b970f2eb922a1f094b0_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

fd1d68a169a2a7ae3397a585f25bba38

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

mscms

RegisterCMMW

kernel32

GetLastError
ExitProcess
GetModuleHandleW

Sections

.text
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 12.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ