8e7e0bbb001bfbc37ef442cce48546e0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e7e0bbb001bfbc37ef442cce48546e0_NeikiAnalytics
Size

8KB
MD5

8e7e0bbb001bfbc37ef442cce48546e0
SHA1

3bc1c0faa94f65bcaa7defa9de7c9bf7d077a990
SHA256

aee0bf3cf066f5acd896f32831699efb1c41a7d1e4e61240b978e1b9448e46e2
SHA512

7762f2c2200a3e280a5948ba63c710d30becf86977abe49b4c9419b06867436faccd3c064a5c6c599ba48ff03ce7c22e77f5b3a818b573a684bf42676214b13c
SSDEEP

96:q43CJp13gDIfLkBRlxKz1bY1lrDGCeXdVq5savmtP+vsh23bDrNQ/Blu/bsBKLU/:qOCv80YTTG1bIWdQuIYu/bYN9BK7lR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e7e0bbb001bfbc37ef442cce48546e0_NeikiAnalytics

Files

8e7e0bbb001bfbc37ef442cce48546e0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

3702ae96c3d17af8e33061d3c814bf51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
GetCurrentThreadId
GetTickCount
GetTempPathA
lstrcatA
lstrcpyA
GetPrivateProfileStringA
CreateThread
CopyFileA
GetDriveTypeA
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
VirtualProtectEx
GetCurrentProcess
GetLastError
CreateMutexA
GetCommandLineA
DeleteFileA
LoadLibraryA
GetProcAddress
Sleep
GetVolumeInformationA
CreateDirectoryA
lstrlenA

advapi32

RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA

msvcrt

fopen
sprintf
malloc
strstr
_strlwr
fclose

Sections

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE