431a78bfdbb112b44c34a998475efea0_NeikiAnalytics | Triage

Sharing

General

Target

431a78bfdbb112b44c34a998475efea0_NeikiAnalytics
Size

67KB
MD5

431a78bfdbb112b44c34a998475efea0
SHA1

9ff843e5356b67b48e3184b33d4763b4faade990
SHA256

5a27d08341ff833ca963bf24cc7b51a37f6cafc230986a3fd145a8e7070f90c5
SHA512

48c83d963ae6468cd51cdef3ea3918a217418acb2322ed9d928dc9c0b5cc99ef7440720f11d3e99cbb90ffdd799194e8ca8ddf6e68c517f82f1de5d1b7d44213
SSDEEP

768:dhwRJrgIDcPsED3VK2+ZtyOjgO4r9vFAg2rqpHOCJ:dCLIYTjipvF2cHLJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
431a78bfdbb112b44c34a998475efea0_NeikiAnalytics

Files

431a78bfdbb112b44c34a998475efea0_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

e836076a09dba03e4d6faa46dda0fefc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpSendRequestW
InternetSetOptionW
InternetQueryOptionW
HttpOpenRequestW
HttpQueryInfoW
InternetReadFile
InternetConnectW
InternetOpenW

kernel32

GetTempPathW
GetFileSize
GetCurrentDirectoryW
DeleteFileW
CloseHandle
WriteFile
lstrcmpW
ReadFile
GetModuleHandleW
ExitProcess
HeapCreate
HeapAlloc
GetModuleFileNameW
CreateFileW
lstrlenW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ