9132ac43fe4b8376a24cbd3c70b48350_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9132ac43fe4b8376a24cbd3c70b48350_NeikiAnalytics
Size

17KB
MD5

9132ac43fe4b8376a24cbd3c70b48350
SHA1

92a5509613d262e1e4dc26b153dd5d019ff0d7a5
SHA256

f76303d468899a8d48d3c52ddb0639e25f97e1fb95e3dbe707cfa363a4f6bd6c
SHA512

68c3441e39fea9c7ef4b2048d8604e0d5dccf75a240ce2072b4a5570622364ea76d6e47eede34909ca886a6233fbf41b7357288834c4634b4445f4f52d3d8d9d
SSDEEP

384:LYAVmGan34N8HBAiyBMCpm6x7fB6TWrRAiXTYu:8AVmZn34NRiwBm47fBp2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9132ac43fe4b8376a24cbd3c70b48350_NeikiAnalytics

Files

9132ac43fe4b8376a24cbd3c70b48350_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 9KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE