b63f3aa75f7b4f8eb2681f4ef1ad8870_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b63f3aa75f7b4f8eb2681f4ef1ad8870_NeikiAnalytics
Size

1.7MB
MD5

b63f3aa75f7b4f8eb2681f4ef1ad8870
SHA1

f9a3941ba005ae5ac5be70c94a4d0ce297561b41
SHA256

45a963512674441c3610600d3123bb999d9472e68617c8658556dae95496a6fd
SHA512

bf68cbd7d7af2d0f406f3e2abb1a48c263055d3622d7e6c557075a8a26b3620754e9f0fe842074323d2b20b58be76032dec8a8711e1a9c43d07c0c5b7c6d3941
SSDEEP

49152:jjzhKwFKElfsrIRwOPYofFuJ+qB/9Wg4euPzJ3y0r:j0wFK0fsIwoN6O3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b63f3aa75f7b4f8eb2681f4ef1ad8870_NeikiAnalytics

Files

b63f3aa75f7b4f8eb2681f4ef1ad8870_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

7547cd08a992b687c417434c3b5c7770

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

Sections

CODE
Size: 1.4MB - Virtual size: 7.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 317KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE