df59e64fa6797b0740a9301616a76740_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df59e64fa6797b0740a9301616a76740_NeikiAnalytics
Size

4.8MB
MD5

df59e64fa6797b0740a9301616a76740
SHA1

651c17bccb262c1c3ed951984be24e02ecfa82b2
SHA256

a5ea01973b4b5095a0d596fa4fbf11fdc680bb45d446a8c74a10c76def68cfea
SHA512

f161ac3b3805c68557dd76429d40d7db400b6cf1bbe57524d873b028c90ed62e768a2bfb1b2bd7ed9eeb106452c69d8c9a24b76f17b1900a6f79fd87dcbb22fc
SSDEEP

98304:UhnA5OgWGbSLJ1SXoq7pnqkBGms7Msgc5RS2CNZYaOzmUDqh+SeYlXJ0GlIY:sA5OgWGbSLJ1SXoq7pqkBGms7Mdcy2CL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df59e64fa6797b0740a9301616a76740_NeikiAnalytics

Files

df59e64fa6797b0740a9301616a76740_NeikiAnalytics
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15.8MB - Virtual size: 15.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 209KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ