5b463332ca99157c6f024d10201b36d0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b463332ca99157c6f024d10201b36d0_NeikiAnalytics
Size

74KB
MD5

5b463332ca99157c6f024d10201b36d0
SHA1

41c2cf93598e8ae5bf0b7f5f72d1742792612cf8
SHA256

3e4fcc9d9603c9fb6e046b3135a81e01060ad6c83a7e9e05b2943a5b0df74e3f
SHA512

66dcdbb7f921d855a514d7c255575d03d2798d56c82c499ce1cc086dfdf2eff563819838f8b2eaf018be23c99bbf7a2a8d1dc9476dc971ee42146aab610eba3b
SSDEEP

1536:10Qy//HYGZ75/51cnN/sTJMj+wiOAQYcnKfJY7:fy//d5/514N/QKjiOAjRa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b463332ca99157c6f024d10201b36d0_NeikiAnalytics

Files

5b463332ca99157c6f024d10201b36d0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE