c1b61cdd43570e2da0e7b527b4a6a210_NeikiAnalytics | Triage

Sharing

General

Target

c1b61cdd43570e2da0e7b527b4a6a210_NeikiAnalytics
Size

428KB
MD5

c1b61cdd43570e2da0e7b527b4a6a210
SHA1

1d951bf7e1b2be2f1bb40d6f498db631111b7246
SHA256

141f75184f43686d0eeaf6a537f69db2cfbe354951a7531a0058e92b92e1d347
SHA512

886b4adb83213cf3db3c4ef055275180af1467b31dd49e65aeede322a53a4a2fa71ce84fcf3c5242338c73a3842aac8567e024060ac69b931a2f40783873eb7d
SSDEEP

6144:GLiuv8j7ZuA5ErOOze1QXh0jfLwhkLX3fgZXVK7iRyM1KTlbfLWqqZy8JqMxL4qA:wi1x55UIEhlCXvkXVg8IBjLvl8NLrA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1b61cdd43570e2da0e7b527b4a6a210_NeikiAnalytics

Files

c1b61cdd43570e2da0e7b527b4a6a210_NeikiAnalytics
.exe windows:1 windows x86 arch:x86

187553847b5ea54b105cce03f3a97423

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind

user32

GetCursorInfo

crtdll

__GetMainArgs
exit
raise
signal

setupapi

SetupDiOpenDevRegKey

advapi32

RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 844B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc2
Size: 300B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE