416f5142675c17a25c3143432824bd50_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

416f5142675c17a25c3143432824bd50_NeikiAnalytics
Size

72KB
MD5

416f5142675c17a25c3143432824bd50
SHA1

345d982ed947e47409e9fe785abdf3513c7b373c
SHA256

93fc3176e9be8fb273bdc2dfb8ecaa0a0a8f40b89dc0e554885aeaef40ad45a5
SHA512

cdfbda522325eb5075983361c3bcc99ec6fa8f91a8c7d2e5e7158beead1d4f91e75ccfda0352be6c766218afc9cff58fe23c1e23587ad0a2cf0b9c2f59f0ec65
SSDEEP

1536:xdH5LPEQ6maSvGVruKuewt/dl7g6y4Gib:fhB6mSjuhtM6yRib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
416f5142675c17a25c3143432824bd50_NeikiAnalytics

Files

416f5142675c17a25c3143432824bd50_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE