a15b9a2ed423957e6df423f531c49640_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a15b9a2ed423957e6df423f531c49640_NeikiAnalytics
Size

73KB
MD5

a15b9a2ed423957e6df423f531c49640
SHA1

769a910e84e177b52007c754ba599740ec7b05a6
SHA256

c588ddd762ef37a00e3aa6973b20a6c8917297313d8675f45b52137dac033350
SHA512

759078b934a796cd4ae7bca543c654372c77eb6f5dc5b9a72d0eec0172ec7675794ebc7faa04795de48b3b14b56f282fefcf8cf3773097064134ea4b7a99ee13
SSDEEP

1536:1d80j8XBulvaVEm+odQpNjoCj2HileSpnt7xQaZUnCZgKQQU3:X8qD96xdKoCj2HioSpnt7xQaZUPQ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a15b9a2ed423957e6df423f531c49640_NeikiAnalytics

Files

a15b9a2ed423957e6df423f531c49640_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE