0b11136f0ddb341da1018914e8d0e650_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b11136f0ddb341da1018914e8d0e650_NeikiAnalytics
Size

97KB
MD5

0b11136f0ddb341da1018914e8d0e650
SHA1

bfff42c7e38f618257f8e56293b275df838bb2ba
SHA256

e471a7af8e32e008a78ed2024df63f16e9e28d49f99b6a5042ce19a8a45682c2
SHA512

962adb8f195068a6cd61843135fe889e87e85429424019e3b0a63e4151cee8828dc234c47a597d610bceb34d4e15b3e93c2e3fce8bf39f0b3d2cfa9c902e610b
SSDEEP

1536:mOyB1D+5nK6FVGFHN5yzB4ZefwlQsOmr2UW:mPv+5nbF8NwVouwMnD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b11136f0ddb341da1018914e8d0e650_NeikiAnalytics

Files

0b11136f0ddb341da1018914e8d0e650_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

b892955ae494fe908bdf52e81e1dfa4c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

EndPaint

advapi32

RegCloseKey

shell32

ShellExecuteA

ws2_32

WSAStartup

iphlpapi

GetAdaptersAddresses

Sections

.text
Size: 36KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bijdhfdg
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE