5c40bf4d26f9b1a7e32b11cf6503fe10_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c40bf4d26f9b1a7e32b11cf6503fe10_NeikiAnalytics
Size

73KB
MD5

5c40bf4d26f9b1a7e32b11cf6503fe10
SHA1

e6fdbc7080ddc4ce9a6c4f7f7163a84e63d937d8
SHA256

a18cc9a67bfcbf7baf2b02a64fc057b637f464eff2010a8d2a9b9af5f3d87051
SHA512

c287d38c0cae8bc0ae273857c75ea46477dd3b88fbde7b583be1bbe2180d83e580174b21a07ab3c996bc94be945deda2db26791e0a2688d1216b79060f3eeb17
SSDEEP

1536:1YF8NLCofRLCg/pdsHT+obdo8Cgzvl4ooofgke253u2w:uF+LCofRLCgxSzXo8CgpIo53u2w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c40bf4d26f9b1a7e32b11cf6503fe10_NeikiAnalytics

Files

5c40bf4d26f9b1a7e32b11cf6503fe10_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE