149b1f5c5bb6220ad5767643e7851410_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

149b1f5c5bb6220ad5767643e7851410_NeikiAnalytics
Size

31KB
MD5

149b1f5c5bb6220ad5767643e7851410
SHA1

ea54dda33358ae4c6aea0bac157c2c45770d908d
SHA256

e3b6a191f773b6d93efa0db96b76dad225459d2383785c8e0a2fb647703c3054
SHA512

7b32411ad16efdb0c6a3ba961c565ba263bbba1e82ef71b4fd812b8698ef560f6fa04da85555698365eb5915793d62c44cc462cd8895c07bc21616f436aefdbe
SSDEEP

768:/qPJtHA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhf:/qnA6C1VqaqhtgVRNToV7TtRu8rM0wY/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
149b1f5c5bb6220ad5767643e7851410_NeikiAnalytics

Files

149b1f5c5bb6220ad5767643e7851410_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE