ad037fbf9ad95c451c038d6bcdb5c140_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad037fbf9ad95c451c038d6bcdb5c140_NeikiAnalytics
Size

7.5MB
MD5

ad037fbf9ad95c451c038d6bcdb5c140
SHA1

34e45c8a7a388a439dad5c9bd8648c5c4cd0a297
SHA256

fb13faaa699c7bc51ee2bbb043ec40b15a2b1af8f2adeb3d4cf236b67c59f503
SHA512

855450635c812da11403d21b95c35d277084cac5f4be2056093d13249b1207ef6eaac92140f49374c03dca97ab4adcf9bce39db73f42aa9395b4ef950a45b35a
SSDEEP

196608:pwbHXu9rmJRc+0kYSzuRBREENd6EaIoPMQ2IO:pwb+YUkYSeR3d6vU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad037fbf9ad95c451c038d6bcdb5c140_NeikiAnalytics

Files

ad037fbf9ad95c451c038d6bcdb5c140_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

678986d7fe8eb1ebce8a0b924f59474d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
VirtualFree
lstrcpyA
ExitProcess
DeleteFileA
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
WriteFile
lstrlenA
VirtualAlloc
ReadFile
CreateFileA
GetModuleFileNameA
GetLastError
CreateMutexA

user32

SetCursor
LoadCursorA
wsprintfA
MessageBoxA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ