46b540ec45596055cda5e24ef01d7030_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46b540ec45596055cda5e24ef01d7030_NeikiAnalytics
Size

27KB
MD5

46b540ec45596055cda5e24ef01d7030
SHA1

cd927442f449e84c9976e6cc287976a9317384df
SHA256

7f27d4e06ba37fb64eae82579077802765c834ebe64bc0a16ef4c153e9cdd4f2
SHA512

aa672a54c04e30a3ad70bcf29e013afa1d9a5a4b3ce781717117dbfc2de8f447252c4d849f0947496c69a97bd362d19df7e77a35f0ab7aae778a355a83f21377
SSDEEP

768:/qPJtUA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKhJJhgcn:/q0A6C1VqaqhtgVRNToV7TtRu8rM0wYw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46b540ec45596055cda5e24ef01d7030_NeikiAnalytics

Files

46b540ec45596055cda5e24ef01d7030_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE