7c9d7141138fe5f07e17159c35e6d270_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c9d7141138fe5f07e17159c35e6d270_NeikiAnalytics
Size

948KB
MD5

7c9d7141138fe5f07e17159c35e6d270
SHA1

816cee64b4b282546d49618014bfd63c4c62cb6f
SHA256

e64fed3be356a7cfef98391d9d51adb368860ec9ff42809be72ffb921d617290
SHA512

acd635670d8cf0ed6c9b90f9f637a77b493443012832ceb2a48f024f9c17875344ffda463c6c70b72eb5ebf5e4e765302b1659b383d2b3500bf3273b98d9310b
SSDEEP

12288:7AepgvgqdPsXxrBqo4qy5jGP0NskfuvgqdPsXxrBqo4qy5jG:EeOJdPsL70NDfSJdPsL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c9d7141138fe5f07e17159c35e6d270_NeikiAnalytics

Files

7c9d7141138fe5f07e17159c35e6d270_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

44ff0a852b40289ff2085cc27e8d026a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleW
GetStartupInfoW
GetCommandLineW
SetCurrentDirectoryW
GetModuleFileNameW
GetProcAddress
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
LoadLibraryA

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 528KB - Virtual size: 527KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 400KB - Virtual size: 397KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ