1b56594f070a759a6521a96c6f7cfc40_NeikiAnalytics | Triage

Sharing

General

Target

1b56594f070a759a6521a96c6f7cfc40_NeikiAnalytics
Size

73KB
MD5

1b56594f070a759a6521a96c6f7cfc40
SHA1

0e822087f2bb81301114357048fcc69b03031f95
SHA256

99cd19d0160d2d20672b8558d5989f1662e817e29f51d6e3de6eaa5c67c3b613
SHA512

60248e251f7909bace63a5b5be7dcc6633ad4da46f4ee12aeea3c0e2d56e11e526ef65ea175a9802c90df35b51b056d0a60c6440ebaab3efe8fb0eb3c3d552fd
SSDEEP

1536:1LLw62p7KTxU0IIBhVu2d7mN9msbqt36etdW:qgTJBq2d7e9ah0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b56594f070a759a6521a96c6f7cfc40_NeikiAnalytics

Files

1b56594f070a759a6521a96c6f7cfc40_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE