501b9bd5e1d7df2977e2ae8067919050_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

501b9bd5e1d7df2977e2ae8067919050_NeikiAnalytics
Size

74KB
MD5

501b9bd5e1d7df2977e2ae8067919050
SHA1

c679627cbe3e85c05a3ebdc313218a42171c4810
SHA256

cb44ffd69bd58315833d97b2629f17c517e31863630d1001f361a3e5abcce30a
SHA512

10cfae4524344bb1aa0a7e2cca69364735d8d225394368b9b01fcd36e10aa6118f99a03fa98012e6a23d57b7074b433a4ee795928f683ed26c6712f8c9799b7b
SSDEEP

1536:14QYxd5ngUaB4tcVsfDGwZSk3QDTcFMxTGigP+LN3P78XsGyelTf4JP08:U1EvMCTyI/ksGySz4B08

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
501b9bd5e1d7df2977e2ae8067919050_NeikiAnalytics

Files

501b9bd5e1d7df2977e2ae8067919050_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE