bd3ad3338dc8c0343c029f7ed8f333c0_NeikiAnalytics | Triage

Sharing

General

Target

bd3ad3338dc8c0343c029f7ed8f333c0_NeikiAnalytics
Size

329KB
MD5

bd3ad3338dc8c0343c029f7ed8f333c0
SHA1

761ea5157e35d0c31798b588dcb2e7b8caf3d446
SHA256

e63674e4a3976d50e41b6184e9681b1a0718ae723b4fb42eb4d2fd4cb876ef0d
SHA512

2e75b5c3cf1bf0995bdd39ed7383e8e51b1980862ca19304849e497db4dc7a0d62db250d731f7fdd752d2ba9d9d46f1ee52f91ac3def10e0505abb0e7546150e
SSDEEP

6144:+8vcLy75hTIEqbK4b8H0Rlp8oHcxXpubG3ELTFTYwg04U7B7A070gy7hZSXKbiUa:+Zy75uEn4gUbp70pubG3u+j270gy7jYR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd3ad3338dc8c0343c029f7ed8f333c0_NeikiAnalytics

Files

bd3ad3338dc8c0343c029f7ed8f333c0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

687a66a775227d0005e97613f60bb345

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

LoadResource
WriteFile
WinExec
CloseHandle
CreateFileA
CreateMutexA
CreateThread
ExitProcess
ExitThread
FindResourceExA
FreeResource
GetModuleHandleA
GetWindowsDirectoryA
WaitForSingleObject
ReleaseMutex
SizeofResource
VirtualAlloc
VirtualFree
WaitForMultipleObjects

shell32

ShellExecuteA
SHGetFolderPathA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 323KB - Virtual size: 323KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ