68a6706d3f06a89057a7f6b5acf80c70_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68a6706d3f06a89057a7f6b5acf80c70_NeikiAnalytics
Size

297KB
MD5

68a6706d3f06a89057a7f6b5acf80c70
SHA1

5baaa9c3e2f0b3bb4f324c50c622a2c020c447de
SHA256

2dd8e0f7e4855c93e692b49e944ef645a608a3bf5dcccea550bf5922e4369c6b
SHA512

ae514dc6df95e78513507ac8b3a642496af10f002ebd1c2ecf2fe3ee40b17101c2e1880589555fe6fcbdac5d9687aa40754193159559c9ce87146d410f351852
SSDEEP

6144:0RIOnicZ7tD7vy7rSxqewCcE3bRK3PTgvaOwXWlBtg/nP:0RImLSSYtxPUhR9g/nP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68a6706d3f06a89057a7f6b5acf80c70_NeikiAnalytics

Files

68a6706d3f06a89057a7f6b5acf80c70_NeikiAnalytics
.exe windows:1 windows x86 arch:x86

eb85f9841caba6951fdea133fd00eec3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
RtlUnwind
lstrlenA
GetModuleHandleW
CloseHandle
GetCurrentProcess
GetStartupInfoW
GetLastError
lstrlenW
GetVersionExW
LoadLibraryW

crtdll

__GetMainArgs
exit
raise
signal

user32

SetForegroundWindow
LoadStringW
SendMessageW
MessageBoxW
DefWindowProcW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 988B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ