1bc2212b4cc8b2269e52c49894018bd0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bc2212b4cc8b2269e52c49894018bd0_NeikiAnalytics
Size

33KB
MD5

1bc2212b4cc8b2269e52c49894018bd0
SHA1

bbefd90f029179cac5f65379ac5a880e6054e034
SHA256

8059069dbf8a352613f638912ad49026f2af473c42500a96148ae43497757de5
SHA512

515a0605a445299ac696c7e8a07d65a2c5177d69dd788563c7b3cb94f7c109021f666088ddef3e5ca93e9c718ec155baa8af0cdaad338420d4fb50910eb5f47a
SSDEEP

768:/qPJtHA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNho:/qnA6C1VqaqhtgVRNToV7TtRu8rM0wYI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bc2212b4cc8b2269e52c49894018bd0_NeikiAnalytics

Files

1bc2212b4cc8b2269e52c49894018bd0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE