be04c0db80e65ee62afd3379c436ea50_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be04c0db80e65ee62afd3379c436ea50_NeikiAnalytics
Size

1.6MB
MD5

be04c0db80e65ee62afd3379c436ea50
SHA1

0f0e32002e3ca3f48895dbab0675ca6c06869b23
SHA256

aa9400ff0105a64adade243b6d59c5ac48f922f4a4c6d01cc20f3571363f2db2
SHA512

8ddca9598550f58467000d1c6edaafdb669f36e354decbdd86b8bfb729fda38ff7c642bee155ebb5054a3f95c642bd40b4ab7a5dcaa3c8ec0146a1ef37016d92
SSDEEP

24576:gELML7bLwxrUGJG4yvH5FMPsW8jBshTIAZ3KHOItnjWk0O+c67:LWvQrBGJW8jCJIqnc67

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be04c0db80e65ee62afd3379c436ea50_NeikiAnalytics

Files

be04c0db80e65ee62afd3379c436ea50_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

dbdb0525986cb60465f8680544bd9d66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
Sleep
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
QueryPerformanceCounter
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
GetCommandLineA

user32

wvsprintfA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE