c44bf254c4aeb3bfddbd3ed44d99fc90_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c44bf254c4aeb3bfddbd3ed44d99fc90_NeikiAnalytics
Size

73KB
MD5

c44bf254c4aeb3bfddbd3ed44d99fc90
SHA1

74be0cced5edd2a03cc5818c9cf57a399e9165a0
SHA256

f83e82ad3404deac676e40461f38d4abd4fb02ab3ecc1834656e544992fec744
SHA512

ef3a52e3037115273edbadf915dbde6b8b16609b3f71d737d285ec46bae4efb1fb4a44a70e1e5de7841dfcde950ee78c562d6bb86f12aa31a80c87a9b5ed8b86
SSDEEP

1536:1HIVaam4XFsej94BpTjtkP0pzHrlFAREEP7VtmmH6O+n7:qVaamMsA9CtkMpzLHHEjqmH6O+7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c44bf254c4aeb3bfddbd3ed44d99fc90_NeikiAnalytics

Files

c44bf254c4aeb3bfddbd3ed44d99fc90_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE