291c252df499ebec8aaa137e86634bb0_NeikiAnalytics | Triage

Sharing

General

Target

291c252df499ebec8aaa137e86634bb0_NeikiAnalytics
Size

28KB
MD5

291c252df499ebec8aaa137e86634bb0
SHA1

1f31f9d15dc29854055cd3e929b689feb5023095
SHA256

fdb9c9baeae5bf9ed042c3ce4386efff3f32f3a85da49f2dad3fc8d24bd71f91
SHA512

1e2469096db9e84aa05b003ca0dc0c328de70492113cbd051fae9f4d586395a89e066b5633dc48e7e80ca84851d1b23c26d4a2f6d91dd0e5a93b4debed57dbf6
SSDEEP

768:VqPJtMA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EwhSahGCom:VqsA6C1VqaqhtgVRNToV7TtRu8rM0wYQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
291c252df499ebec8aaa137e86634bb0_NeikiAnalytics

Files

291c252df499ebec8aaa137e86634bb0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE