acba6ec8fa40be6e237ed04547013140_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acba6ec8fa40be6e237ed04547013140_NeikiAnalytics
Size

130KB
MD5

acba6ec8fa40be6e237ed04547013140
SHA1

2293103bf78f802def3f07004ecb71a99b2cb06a
SHA256

26fad3cfdfb2ceffc444105953e1b67b465ac5b9f8f7a24b1319899252d98106
SHA512

db5232f684f8e0ce6f42b1b2d6ae982d4e59283d6e2eb9f90e68a6cb4dac02a39d09df31c4d14d3c73945cc7c7641caeddc50fdf64ab85ccd3c61c9b0195d2f0
SSDEEP

3072:gxmaY5tLNxJOS+huzSAFkYU2wknwrkcfRb0Kc1YoaKj9+HEh5JSF:SC5lNGSTSyXnwko5IVa1EjK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acba6ec8fa40be6e237ed04547013140_NeikiAnalytics

Files

acba6ec8fa40be6e237ed04547013140_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

9ca2c7229b7d3b9d5e0de18cb57f3f1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

CopyBindInfo
GetComponentIDFromCLSSPEC
IsJITInProgress
IsLoggingEnabledA
IsLoggingEnabledA

wsock32

WEP
WSAAsyncGetProtoByNumber
WSAAsyncSelect
WSAAsyncSelect

advapi32

AbortSystemShutdownA
AddAccessDeniedAce
BackupEventLogA
BuildExplicitAccessWithNameA
BackupEventLogA
BuildExplicitAccessWithNameA

comctl32

LBItemFromPt
MakeDragList
MenuHelp
PropertySheet
ImageList_LoadImage
RemoveWindowSubclass
ShowHideMenuCtl

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 125KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE