a5202ee8b8b4199a61ac4ebbbf56ed60_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5202ee8b8b4199a61ac4ebbbf56ed60_NeikiAnalytics
Size

3.3MB
MD5

a5202ee8b8b4199a61ac4ebbbf56ed60
SHA1

af76e6eb83090945227425a3d4690133ec1a112a
SHA256

9c973e8f553410417aa20b91fa58d04139cb703548839335ba70ba6409425130
SHA512

a671adff7d2f20802da8fd4b8f6c10b480bd73a0a32e46258345c4b842f9f5634ec1327b6d8075534321cc7986ff90ebdc68effa3e0087364109d7037db69085
SSDEEP

49152:em1BCxdUmJk8p3D12mN/M26c2txZIdiCSeI/svFCr5f7lFk7X90qZdH8KK7F+G6Z:N1B8UBI12mNb2FWJoTlddKjRmjRs1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5202ee8b8b4199a61ac4ebbbf56ed60_NeikiAnalytics

Files

a5202ee8b8b4199a61ac4ebbbf56ed60_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

aa77d18b40072a7e1dc36630aafffd27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect

Sections

.XPack0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 14.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XPack
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE