8dbede2c7c81e7c874a6b2f416cc2f00_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8dbede2c7c81e7c874a6b2f416cc2f00_NeikiAnalytics
Size

73KB
MD5

8dbede2c7c81e7c874a6b2f416cc2f00
SHA1

03654129b8f79c0402049235a7f0e247bc600a61
SHA256

7411599cb6531e3f8e0d19db0b0d9fb9217b29c0fbf2bec75e674797cd2bcf61
SHA512

128a065a850c67fa9357c3f29d5ca2a5a88656f6e2ee00a61bd3ccafb310b7bb7b3dd3b0a82b938e6e59912f8dd48ceaf5e829cd02c5256022f8336fca153a71
SSDEEP

1536:1bPd6aXUhvYMwRHoly48kXA9pD9fWZ/bwPsaqPc1KqvV2mpH:Ji2Mt8kQ9p9fSbwPEPQ1/pH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dbede2c7c81e7c874a6b2f416cc2f00_NeikiAnalytics

Files

8dbede2c7c81e7c874a6b2f416cc2f00_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE