82d63e2660fab23ad1947ad5a07f4930_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82d63e2660fab23ad1947ad5a07f4930_NeikiAnalytics
Size

25KB
MD5

82d63e2660fab23ad1947ad5a07f4930
SHA1

d756b75d435bde0b6b04b9bfa96338852d5ba665
SHA256

1fb67c8cfb2e08b8e4d006887822b9c0e8f5e74b5000ff8a4561548b0d64694e
SHA512

cbd63e4b17e45857a5b556e0135e331187fabf8b79a29b47448beaaf7c2bb9052fa6fd1fadce62dcceefb960c1bb263c3c56bcf0beda6f21866e78d7dde178a4
SSDEEP

384:ErzPOxwRN5blpk3IdXO61Eiy8J/De+Hzg2XBsfdKsCAvWrsDRydB0b8aDl2RZ4N:ErzjNdM3IdLV7Lzg2R+7605h2UN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82d63e2660fab23ad1947ad5a07f4930_NeikiAnalytics

Files

82d63e2660fab23ad1947ad5a07f4930_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE