c4ea2150bff96d9f6a840992bc1f75c0_NeikiAnalytics | Triage

Sharing

General

Target

c4ea2150bff96d9f6a840992bc1f75c0_NeikiAnalytics
Size

73KB
MD5

c4ea2150bff96d9f6a840992bc1f75c0
SHA1

85298f55cf85663b49861f1d3bcecf28f6b80d0e
SHA256

384d60c55d8459a8ac7e03b8b0c31df12785a4cd9375b6deced89fe2d6465807
SHA512

181457e2b71e47c060881b4083b80350992a001499b954b5ba4b980eca2c96d44f1a4ae60227d8d370d63fc8182b14408ebe1e74d54a1b5b745a3ded34ba5453
SSDEEP

1536:1YF8NLCofRLCg/pdsHT+obdo8Cgzvl4ooofgke253u2E:uF+LCofRLCgxSzXo8CgpIo53u2E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4ea2150bff96d9f6a840992bc1f75c0_NeikiAnalytics

Files

c4ea2150bff96d9f6a840992bc1f75c0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE