ccb6cf5a0b3b399b56a63513157d8280_NeikiAnalytics | Triage

Sharing

General

Target

ccb6cf5a0b3b399b56a63513157d8280_NeikiAnalytics
Size

42KB
MD5

ccb6cf5a0b3b399b56a63513157d8280
SHA1

523656919805652fdc907c494360209e8011f044
SHA256

18ebbaecfb3984cefc26e2f7924a9dfe89b69cfe76374b4bea63201b38165a65
SHA512

0c9c3ba885766847d778f0c72b1dc330353dae8395cd4ef5961c57702747070712a97e4c32d2db8c29995c2c3d2709c1460fa17a0d30897277b77fffd73beb6e
SSDEEP

384:cRvJdqOxpqm5LpvmLwtCO/e0Ajj6AH2XWwBOdw65UBsU0BSfcmkNcP4Rio:ghUK3dIgCSJAvLiBOdP2Bd0BccmkTX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ccb6cf5a0b3b399b56a63513157d8280_NeikiAnalytics

Files

ccb6cf5a0b3b399b56a63513157d8280_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e1894de59266b62f743d38ca0eda457b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
SendMessageW
DestroyWindow
DefWindowProcW
CreateWindowExW
LoadCursorW
LoadIconW
RegisterClassExW
LoadAcceleratorsW
GetMessageW
TranslateMessage
DispatchMessageW

kernel32

lstrcpynW
lstrcatW
GetCommandLineW
LoadLibraryW
GetTempPathW
ReadFile
CreateFileW
GetTickCount
GetModuleHandleA
GetProcessHeap
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetModuleHandleW
ExitProcess

gdi32

TextOutW
SetTextAlign
SetBkColor
DeleteObject
GetBkColor
GetStockObject
CreateSolidBrush

comctl32

InitCommonControlsEx

shell32

CommandLineToArgvW

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ