e2dd7d892eaeb34c988f38a539f4fc60_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e2dd7d892eaeb34c988f38a539f4fc60_NeikiAnalytics
Size

924KB
MD5

e2dd7d892eaeb34c988f38a539f4fc60
SHA1

1db2a60496746f684c3774b516754582d008954f
SHA256

defb96724781fd15f0daff81e611214ebbd9e6540e428395c65ff7d0c66517aa
SHA512

b485b84524897cac42d2d00de062d07b89153bc877a17d03b82ec3cbce11baffca55158687d1b19f66f846564824a7bca22950b33587ac8204cab821808c387c
SSDEEP

12288:Wh3ZukLF5kU0o3mOxXJXlZCRX9hnJKLqOHB7rFQjCVgcCq:WhMkxBWQXJ+9hQTxhQmVj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2dd7d892eaeb34c988f38a539f4fc60_NeikiAnalytics

Files

e2dd7d892eaeb34c988f38a539f4fc60_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

8c8cd2fe8f466202b9cc82f6156dad3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
Sleep
ReadFile
SetFilePointer
CreateFileA
QueryPerformanceCounter
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
GetCommandLineA

user32

wvsprintfA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ropf
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ