cbe31530824384b0ea2927f86d6aa950_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cbe31530824384b0ea2927f86d6aa950_NeikiAnalytics
Size

948KB
MD5

cbe31530824384b0ea2927f86d6aa950
SHA1

1c29d7c3baea644a6ef9eaf65d7c41c9c938528e
SHA256

46f6d0621c04e0fca5275a0b85b8af05ad188eceae7eedc2f08811593760ea6d
SHA512

e139265afec2aee974bf1e01fa8b8da46813ff6b912da453df3b9725296077c43a951acb1d0e0d8c6ecd7b4cfe00b5316ca4d63dc7cc14cbe6c81fb9ed459f97
SSDEEP

12288:xSCfWjlqUF4YGa0MSEeiGrJD7FA5lqUF4YGa0MSEeiGr:xPWAG4YGeAxASG4YGe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbe31530824384b0ea2927f86d6aa950_NeikiAnalytics

Files

cbe31530824384b0ea2927f86d6aa950_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

44ff0a852b40289ff2085cc27e8d026a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleW
GetStartupInfoW
GetCommandLineW
SetCurrentDirectoryW
GetModuleFileNameW
GetProcAddress
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
LoadLibraryA

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 528KB - Virtual size: 526KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 400KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ