3285ebeeba4d1831433a405541c2acb0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3285ebeeba4d1831433a405541c2acb0_NeikiAnalytics
Size

27KB
MD5

3285ebeeba4d1831433a405541c2acb0
SHA1

9134b5f76cfb17a8ee8082436671ba2ca45a6036
SHA256

8be9bdcab03a75c08196c96ba6e02260916176034ac47732b4308b850a4217cc
SHA512

7184227c9480db08d0d26aa195bcd986164a0a7eb75b844af38b926399a1adf9488e560aa0256ae89639c9da6c4f676e71ba2750e0b839d1a8ca5f830b9d2c5b
SSDEEP

768:/qPJtUA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKhJJhgcQ:/q0A6C1VqaqhtgVRNToV7TtRu8rM0wYb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3285ebeeba4d1831433a405541c2acb0_NeikiAnalytics

Files

3285ebeeba4d1831433a405541c2acb0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE