ad19dc6a95417b46b23f674c4adc7df0_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

ad19dc6a95417b46b23f674c4adc7df0_NeikiAnalytics
Size

5.5MB
MD5

ad19dc6a95417b46b23f674c4adc7df0
SHA1

cae145b85948a9e04585c471a1a4ee0c138659e9
SHA256

38b181be9ba07410116aebb1a5115fa8da7293904eccafccbe206aaa60fc8542
SHA512

f6975a459a1a821bc04d4e3e7e8c8c9fdf32fdbd656a337a47019663555c60837b44094bc8229bbcbab0300834b72c943ac4437b2750f5bf01f25815c8ddf69e
SSDEEP

98304:p4MgfqN6V5F0xEyX/xbhzDK6HAXSXCTg/xU924nW3eXdSl:+fC6VMxEQxxDDgiZpU92QzXdSl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad19dc6a95417b46b23f674c4adc7df0_NeikiAnalytics

Files

ad19dc6a95417b46b23f674c4adc7df0_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

e4564944057a42f09a2cbcd03e930e4c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpSendRequestW

kernel32

lstrlenW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

wsprintfW
CharUpperBuffW

shell32

ShellExecuteW

Sections

.text
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 8B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.w9"
Size: - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ESX
Size: - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

._99
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.QOp
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.eH]
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 445B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e4564944057a42f09a2cbcd03e930e4c

Headers

DLL Characteristics

File Characteristics

Imports

wininet

kernel32

user32

shell32

Sections

.text Size: - Virtual size: 1KB

.bss Size: - Virtual size: 8B

.rdata Size: - Virtual size: 1KB

.w9" Size: - Virtual size: 448B

.ESX Size: - Virtual size: 206B

.htext Size: - Virtual size: 4KB

._99 Size: - Virtual size: 3.0MB

.QOp Size: 1024B - Virtual size: 972B

.eH] Size: 5.5MB - Virtual size: 5.5MB

.rsrc Size: 512B - Virtual size: 445B

.text
Size: - Virtual size: 1KB

.bss
Size: - Virtual size: 8B

.rdata
Size: - Virtual size: 1KB

.w9"
Size: - Virtual size: 448B

.ESX
Size: - Virtual size: 206B

.htext
Size: - Virtual size: 4KB

._99
Size: - Virtual size: 3.0MB

.QOp
Size: 1024B - Virtual size: 972B

.eH]
Size: 5.5MB - Virtual size: 5.5MB

.rsrc
Size: 512B - Virtual size: 445B