adf05660464b01e6b841532f23892370_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adf05660464b01e6b841532f23892370_NeikiAnalytics
Size

129KB
MD5

adf05660464b01e6b841532f23892370
SHA1

4931f579c779ee0ca27545433fa794abfffb3c50
SHA256

eeffaed71c3c1e0e7f16226c96b4a8695de75251c0d902baeff03923d72cc74c
SHA512

c9beaa6bbaa6df99bfa7702e05628248705076252980b7ddd88248472e72141a3ce9b49559dcd41d6e0f88d621cd1c98f59a42d05866233f58bcf7b7e2a1820c
SSDEEP

1536:/sPnhkJW+sg8RtHKYpC1Uqd08wQCtEfWocRobuE1/t:/CcW+xItKYpCmG7Ceuocav1/t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adf05660464b01e6b841532f23892370_NeikiAnalytics

Files

adf05660464b01e6b841532f23892370_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

beaceb4f5e701da988ac60ef944cc814

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathRemoveFileSpecW

shell32

CommandLineToArgvW
SHGetFolderPathW

wininet

InternetGetConnectedState

kernel32

GetCommandLineW
CreateProcessW
ExitProcess
WaitForSingleObject
GetModuleHandleW
Sleep
GetFileAttributesW
GetModuleFileNameW
GetProcAddress
GetVersion
GetCurrentProcess

user32

RemoveMenu
GetSystemMenu
FindWindowW
MessageBoxW

advapi32

RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 123KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE