af9b4e33b9a2c740563bfdf09a697900_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af9b4e33b9a2c740563bfdf09a697900_NeikiAnalytics
Size

3.4MB
MD5

af9b4e33b9a2c740563bfdf09a697900
SHA1

9130094d794074528ca4b687c8813f81ceb37459
SHA256

2c55cc6b4378bb4c8e5e5d0d13a32211f972ff3eb7dc07a357b4258741a326c6
SHA512

e57acc414e11f6504c7c7078847beb3043ac3c4f99559a154e26a89944169b5b7e226b1b05a979c315dd7b219a3631deedfb77913b6eac7c8855b4eea22178c2
SSDEEP

98304:JPK8Hn/3FO35y9VI6xxtYNpOudqZL+nTq:JPK4n/1OJyNQOlZH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af9b4e33b9a2c740563bfdf09a697900_NeikiAnalytics

Files

af9b4e33b9a2c740563bfdf09a697900_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

d4ff4e9520d2b9d618be12fecec0c0ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LoadResource
SizeofResource
FindResourceA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
DeleteFileA
Sleep
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetStartupInfoA
LockResource
lstrcpyA
GetCommandLineA
FreeLibrary
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
GetModuleFileNameA

lz32

LZCopy
LZOpenFileA
LZClose

user32

MessageBoxA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ