842edc47a8c9a895590caaa14a180d30_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

842edc47a8c9a895590caaa14a180d30_NeikiAnalytics
Size

74KB
MD5

842edc47a8c9a895590caaa14a180d30
SHA1

b0c73644662418ddab02ebe4eb2e1a5e1a8de9cf
SHA256

a8f78b14e01dec775d5e1a252f505929f44461ea3b222e03f4d81b89c5411b58
SHA512

d5f49dee2d72d11115702576774f050a981be58855f51349b5b9d1477a75d99893774f535d6da6c757ebac8b3e5804d63118f50ab85ba189416ba256c2ccc73f
SSDEEP

1536:11Yh85gHOEutUKZKEHfmWqk0AEPGER3ZamvM4:Mh3HOEuaWKE+/RA87RHv5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
842edc47a8c9a895590caaa14a180d30_NeikiAnalytics

Files

842edc47a8c9a895590caaa14a180d30_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE