136f7128e807441bf11bf1e7f6eb5b70_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

136f7128e807441bf11bf1e7f6eb5b70_NeikiAnalytics
Size

7KB
MD5

136f7128e807441bf11bf1e7f6eb5b70
SHA1

7cb7361ec62d6f1461b417014b101212a31a0486
SHA256

d07c128e36e4045dfb6ba8e69af3803436aecdfdc5719e90f02abdec5db78a4f
SHA512

bf3f7a683da128e3c109c09a137a371cf095f22d05d460d099e9c4f159199d573ced2402e57e6157d9631efece7254f15840422ec880541ab24669975272cd27
SSDEEP

96:Zcwv4mcWKh96tgC3RTnKymV4458dNhLGEoC6pPsy9wD+/rgDehazwqlklrR:GHmcWKG9TnKfz58dNhKpeYwDMrJazTql

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
136f7128e807441bf11bf1e7f6eb5b70_NeikiAnalytics

Files

136f7128e807441bf11bf1e7f6eb5b70_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1009B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ