b606b5830c1061f9b68c7a000d101c40_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b606b5830c1061f9b68c7a000d101c40_NeikiAnalytics
Size

70KB
MD5

b606b5830c1061f9b68c7a000d101c40
SHA1

0f8e15dccc9bf2762e379385fa5f400f7905b42c
SHA256

71ffc7692dfad01dff6a117a3e266e5bb26ed0b587f1fc287471f347c6314594
SHA512

47be90a5c9532efd373084816046e61bf72f9b6720ad809845f68b7a6302d14156b8421201d443dd6dce7cb65e2b37a05bba2c26e486b7d04b5ef1e01428c54a
SSDEEP

1536:1JoSST4YsYpWvd5cHWU11m+b8gkIOUlzt9rIp:n1S6jvSJ9QIrbIp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b606b5830c1061f9b68c7a000d101c40_NeikiAnalytics

Files

b606b5830c1061f9b68c7a000d101c40_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE