c45c2a47d6a2323ba4655ab811a544b0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c45c2a47d6a2323ba4655ab811a544b0_NeikiAnalytics
Size

74KB
MD5

c45c2a47d6a2323ba4655ab811a544b0
SHA1

5ab04e925fa3e98590fd4d502da85b48597c3be9
SHA256

400b090ebf177667d353f6bc374f5ffa62000c0737760a81704ff4449f17e40d
SHA512

f268b5e5979f4aa1a5ec672d57fc58a8f4709f081a5c6b3c838f1f5ec2fc933b56c802be56265eaa55a9af0575a3613d81fea859c44de42993606481c14f8633
SSDEEP

1536:1wrcZa4V5fH01ZJdlUOIV3js6/XyMgjm6Ul0sYnLwDz:y6RRH0IVweitm7lXYnEDz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c45c2a47d6a2323ba4655ab811a544b0_NeikiAnalytics

Files

c45c2a47d6a2323ba4655ab811a544b0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE