d404c3b884ef551abd73bcc8242bbc40_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d404c3b884ef551abd73bcc8242bbc40_NeikiAnalytics
Size

74KB
MD5

d404c3b884ef551abd73bcc8242bbc40
SHA1

5928d266f48de64d547bcef23a6f597a432452eb
SHA256

3cee12f2bc2f3335cf86eed89c3c22af5e061a28624f64560f55960cf80ec55c
SHA512

415bd07869d258d9763e27c811d57c14adbb5d821fa03158a16c4049cd9fa827f42bf9d8d168a090654e24b56156ad62587b9353bb0193aedafa12fad5585d25
SSDEEP

768:hZZ6Zyf9IsOotoORa9BtsKq59qixs6LD908odASouD/7Vs6U2Y6AdYLSQhOUul8i:1sxd9IKubv9svDzhkiLSQoUulHein

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d404c3b884ef551abd73bcc8242bbc40_NeikiAnalytics

Files

d404c3b884ef551abd73bcc8242bbc40_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE