d111ccda030a10a08ae625cd0e8cae40_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d111ccda030a10a08ae625cd0e8cae40_NeikiAnalytics
Size

73KB
MD5

d111ccda030a10a08ae625cd0e8cae40
SHA1

ca850271a206f2d2bca9ebfd4cfa1acdf4cf6b7a
SHA256

4829f4b1e630e881a9bb29f26f4a0d3836363c91eb7782888fd7339def7222e7
SHA512

9cd6604da5aa89552a17abc4ac2112fbf6f1cedf4e4d2bf8c0c0ac0dc894515bc9924d447fc10856d36cd9b086cb45204e00317701f132aadc48e824efc1535a
SSDEEP

1536:1pbnNmOOVSVpDk//Gs3HHU81PR+i+TiYPm1AUf:3bnPBDeGs3UG+SelUf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d111ccda030a10a08ae625cd0e8cae40_NeikiAnalytics

Files

d111ccda030a10a08ae625cd0e8cae40_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE