7930ae72603102132d0ddc87ea6a5770_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7930ae72603102132d0ddc87ea6a5770_NeikiAnalytics
Size

31KB
MD5

7930ae72603102132d0ddc87ea6a5770
SHA1

2c84f4fcc71f2c60ade84e9b9d7d37d762542636
SHA256

e68585435ddc45fd956aa7a9dd58e23c7ec510c6964f790ad22af2fd559ed611
SHA512

1786c62c1fa258976aee7957dad611bb0b670d56161d55b6202ffc190351ab5ac5d9a6d6fe2a0bf6619f421f76f46648eb6e4379a486c642e8ba42348ca798f3
SSDEEP

768:/qPJtHA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhZ:/qnA6C1VqaqhtgVRNToV7TtRu8rM0wY5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7930ae72603102132d0ddc87ea6a5770_NeikiAnalytics

Files

7930ae72603102132d0ddc87ea6a5770_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE