7f4f8c5310caa2390368653ced350250_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f4f8c5310caa2390368653ced350250_NeikiAnalytics
Size

6KB
MD5

7f4f8c5310caa2390368653ced350250
SHA1

0f136593edda2b421aeb7861e3984e6a9b839f44
SHA256

5451c8134a55947c57d26670956bcebe9a6e31f2f329e0bceceefa64c84c9d89
SHA512

4b0293a93a91ee10fed6342b33ca9bf1c313f7eb9215c96f9476363b6446f1a2c12c0d004bdc9659d92b1e42c42579669bdaa6bbdf4d4ada6c46d9faad2af6c9
SSDEEP

96:mBLYtOvLGapzrZ6wAnQWRRUbw2CqDw1boYlqqAWSC:mBLYtezrZmQWRRAw7ZlRkC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f4f8c5310caa2390368653ced350250_NeikiAnalytics

Files

7f4f8c5310caa2390368653ced350250_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

b1decad0f067131fff2e76ab43787f60

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpOpenRequestW
InternetConnectW
HttpSendRequestW
InternetReadFile
InternetCloseHandle
InternetOpenW

kernel32

ReadFile
SleepEx
GetCurrentDirectoryW
HeapFree
FreeLibrary
GetProcAddress
GetModuleHandleW
HeapCreate
HeapAlloc
GetModuleFileNameW
GetTempPathW
CreateFileW
GetFileSize
lstrlenW
ExitProcess
DeleteFileW
lstrcmpW
WriteFile
CloseHandle
LoadLibraryW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ