81b7780462c18f4f083190dcfc26d5f0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81b7780462c18f4f083190dcfc26d5f0_NeikiAnalytics
Size

36KB
MD5

81b7780462c18f4f083190dcfc26d5f0
SHA1

3c39c093240fb8046caf1f5cce98907b2bd21175
SHA256

9a69016756194401514ba5ec14123859f9f39cb60621b2bc456765bde9109147
SHA512

aa33b7f05585fdd9e145df7fda7006769d3d0369cac187e4d567d5b3d5174caffccdf41a8ffb65179eaa4aeed4fba6d70bf37e0b2cf117a3c3e3e4109663e362
SSDEEP

768:zJaHruHdkXjDLyXuxpCuwDEyFfW7aqudjJD6Da7c/v+RJv99nMDPJo:zJaHrOo/mX0QPDEEqaJdjJOD3mRz9n+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81b7780462c18f4f083190dcfc26d5f0_NeikiAnalytics

Files

81b7780462c18f4f083190dcfc26d5f0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

8d68c2d66cc9e4a33fa518eb7adf8817

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetFileTime
GetTempFileNameA
GlobalAlloc
GlobalFree
DeleteFileA
SetFileTime
VirtualProtect
WriteFile
lstrcpyA
lstrlenA
CreateFileA
MoveFileA
CloseHandle

advapi32

RegOpenKeyA
RegQueryValueA

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 462B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ