ec68f13d9f6ec4ba22d4b2bb83f2cc20_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec68f13d9f6ec4ba22d4b2bb83f2cc20_NeikiAnalytics
Size

69KB
MD5

ec68f13d9f6ec4ba22d4b2bb83f2cc20
SHA1

e871a8ee4a169d4928c74449b3c3fffa20d4c4ca
SHA256

6107b3d65231ca8d034e39274cfefed8ca9a1e9fedfcc4796ee8f737ae9d244f
SHA512

d680da46ca6f6e74690b3ac05287bbc3d7e96066cba714385c3ce7178538091db4d06fd092b781ad33942d25f388736bb70f28ab8199cc7751d39ec4b42c14be
SSDEEP

1536:1pbnNmOOVSlpDk//Gs3HHU81PR+i+TiYPm1AUOL:3bnPRDeGs3UG+SelUS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec68f13d9f6ec4ba22d4b2bb83f2cc20_NeikiAnalytics

Files

ec68f13d9f6ec4ba22d4b2bb83f2cc20_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE