3b6597ebf82a4c7b110007484bfe7c70_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b6597ebf82a4c7b110007484bfe7c70_NeikiAnalytics
Size

22KB
MD5

3b6597ebf82a4c7b110007484bfe7c70
SHA1

fa64e862615043bccac402cf124b6912e9df0443
SHA256

57222da7d5f80971b399fd2a7040e1df6b9b082f6d2d3041b79214c95bf06877
SHA512

a139da4af45c4f1c164138460afdaf9be90ccc12ffc8404d377ce7f6410e108987d0e29dcea7305488279ab0b2700f51191377b44899801fd2137b2249cef269
SSDEEP

384:48iWc/qx3xFgBCrnUCHR4pV+qtde1jg0A0K8KyPVn28AcFglNfwXhReLL:XF3x+BaJHRIkqtdex/ALLyPh2Xcmlyxa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b6597ebf82a4c7b110007484bfe7c70_NeikiAnalytics

Files

3b6597ebf82a4c7b110007484bfe7c70_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

d3a008f4f08a505723cdb1f0aaf0d3a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProcessMemory
VirtualAllocEx
GetProcAddress
LoadLibraryA
VirtualProtectEx
GetThreadContext
CreateProcessA
GetCommandLineA
SetThreadContext
ReadProcessMemory
ResumeThread

user32

GetDC

gdi32

SetTextColor
GetTextColor

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE