62c2c48b5f96d00b39a3a567ad339a20_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62c2c48b5f96d00b39a3a567ad339a20_NeikiAnalytics
Size

8KB
MD5

62c2c48b5f96d00b39a3a567ad339a20
SHA1

ed236e21272b8f675f52bf034f8549b83765950d
SHA256

8eb03a274efe5099c7c7e1938f0c506948d04012790dece29d1cfbcad1d8fa0f
SHA512

8355f6590c477a8ec4e26633d9366efa323d1b8020b501e1833afbdb88c4c807a98687904177e4113617b182936423e2bc9f48a65424195edadffaf93e19e2bd
SSDEEP

192:Jai5AbBNkcnKfzr/JBsEQydOW2S3UOMy/:n5q3rKfzrxB3QydVYa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62c2c48b5f96d00b39a3a567ad339a20_NeikiAnalytics

Files

62c2c48b5f96d00b39a3a567ad339a20_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1003B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ