7ddffc789d4ec96c08a3b038ab6a0d50_NeikiAnalytics | Triage

Sharing

General

Target

7ddffc789d4ec96c08a3b038ab6a0d50_NeikiAnalytics
Size

33KB
MD5

7ddffc789d4ec96c08a3b038ab6a0d50
SHA1

e1f801c6a6aaa47083c09dfc82e2417fc3f05058
SHA256

3f072c4f8ebbdeca58421dc1361eb62bc574e0f002d4c70b40a1bd9cf076d27e
SHA512

d6ab8c43112a1d8f61df6550db8af929891a3fafa7402f9d0afb5213a8d58078fa541074cfa8b2633b4a3dc1e5fb35b7dd8e3ea1186e0584ea4da54ff2c61b9d
SSDEEP

768:/qPJtHA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhJ:/qnA6C1VqaqhtgVRNToV7TtRu8rM0wYp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ddffc789d4ec96c08a3b038ab6a0d50_NeikiAnalytics

Files

7ddffc789d4ec96c08a3b038ab6a0d50_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE