553159acd25a9a980e05a111cf0fce90_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

553159acd25a9a980e05a111cf0fce90_NeikiAnalytics
Size

73KB
MD5

553159acd25a9a980e05a111cf0fce90
SHA1

c3d66c2a8e2ce9ab786e99dbbb7eb6488eb83566
SHA256

0b7924ef1a921104f7e6cc28173b173c7e89b548fad93878f784d28e01fbf7fa
SHA512

a8de26eaee2fc88ba92865099d5276428e9ec7efb6b8dced454bdfad7e6d89d4ef67cfa538e5232b07884520a8fe39ca22241be0dd486869a1564333b4b5b90d
SSDEEP

1536:1/5eSd2CGilFul/vKVjb/uNf5Nf8kuHPvIRgHq/:LDavcbUZ8trq/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
553159acd25a9a980e05a111cf0fce90_NeikiAnalytics

Files

553159acd25a9a980e05a111cf0fce90_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE