33a4c302792c1b8d4f2830796a555900_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33a4c302792c1b8d4f2830796a555900_NeikiAnalytics
Size

27KB
MD5

33a4c302792c1b8d4f2830796a555900
SHA1

dc9b3c8583f9cfcdcab1e4bc2ba0c00a86020b72
SHA256

94b1526dbd39aa24e1698310535db1907268eee02841faa56568285283a3663e
SHA512

41f649f3c004459f42cdf8b46b07084cd6b6a42d5301526268aa7827f7e4befdbc1876cf0d35df335380650aab8087d6494883aafd613a655a9cce4ace7829a4
SSDEEP

768:/qPJtUA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKhJJhgca:/q0A6C1VqaqhtgVRNToV7TtRu8rM0wYx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33a4c302792c1b8d4f2830796a555900_NeikiAnalytics

Files

33a4c302792c1b8d4f2830796a555900_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE