ab23312876b8f7fd1cf42f847a31ca00_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab23312876b8f7fd1cf42f847a31ca00_NeikiAnalytics
Size

24KB
MD5

ab23312876b8f7fd1cf42f847a31ca00
SHA1

2bda4de07f13c7a039e47e16408afabd87c7e0c0
SHA256

1fb2214416132641be12467ca6b566aaf2bad81f31a72ea6c14b1a5866bfab24
SHA512

a9f7572b46e84296b2c960a3d1e6b8e0f1e61cbc12763785002da1ee3b8694cc2b79c45b6f6a7a7b8ee2a1ed6b2b273afdd8ac160c2d702a7c8b6bb69ef36364
SSDEEP

384:b2AsyDTIWwt2JdtTsGH1ARxruGO8o+4tdmuQc1PbJiWmJE:y+DT/jTsGVNQMfJifG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab23312876b8f7fd1cf42f847a31ca00_NeikiAnalytics

Files

ab23312876b8f7fd1cf42f847a31ca00_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

4517779c858c277fe37111eb804668e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
TranslateMessage
ShowWindow
SendMessageA
RegisterClassExA
PostQuitMessage
MessageBoxA
LoadIconA
LoadCursorA
LoadBitmapA
GetMessageA
EndPaint
DispatchMessageA
DestroyWindow
DefWindowProcA
CreateWindowExA
BeginPaint

kernel32

VirtualFree
ExitProcess
GetCommandLineA
LoadLibraryA
VirtualAlloc
CreateFileA
GetProcAddress
lstrlenA
lstrcpyA
WideCharToMultiByte
MultiByteToWideChar

gdi32

CreateCompatibleBitmap
CreateFontIndirectA
DeleteObject
CreateCompatibleDC

ole32

CoUninitialize
CoInitialize
CoCreateInstanceEx

oleaut32

SysFreeString
SysAllocStringLen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ