3915ecac013aa69eb1fb345e294da230_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3915ecac013aa69eb1fb345e294da230_NeikiAnalytics
Size

71KB
MD5

3915ecac013aa69eb1fb345e294da230
SHA1

7db1e9308bd86ce335a9b5a3fb8420514b0adec8
SHA256

34d9dec0ac14610b74c442d9de336d9591b49262f99fd12dbd21b7ad3c2f7e8b
SHA512

6180ca52b210552d2e183f73bf07f7bb00878cb982b3f4054a47f6436a0979d825ffe67b52ff66a789c86cdd3c3b9121bfd38080e2ac76d3191c45e079c01252
SSDEEP

384:MdPnITsHlTxk7ETVAyPyAtatgTkeI8rlHfuDLLfFGY2rXdSkxzyuafqr9KpteyNm:MdAT05xk7HKQ8xccJjIVqrzyuT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3915ecac013aa69eb1fb345e294da230_NeikiAnalytics

Files

3915ecac013aa69eb1fb345e294da230_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

d0b8285184365a838ba34f4f2ef57766

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetSetOptionW
HttpSendRequestW
InternetConnectW
InternetReadFile
HttpQueryInfoW
HttpOpenRequestW
InternetQueryOptionW
InternetOpenW

kernel32

HeapCreate
GetModuleFileNameW
DeleteFileW
CloseHandle
GetCurrentDirectoryW
GetTempPathW
lstrlenW
lstrcmpW
ExitProcess
GetFileSize
HeapAlloc
GetModuleHandleW
WriteFile
ReadFile
CreateFileW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 939B - Virtual size: 939B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 156B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ