c75c3c551b32728a7d57c4b2d5b1edd0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c75c3c551b32728a7d57c4b2d5b1edd0_NeikiAnalytics
Size

9KB
MD5

c75c3c551b32728a7d57c4b2d5b1edd0
SHA1

9646403e5c39143817c6f1f3e3ec0529368ab7f5
SHA256

4bf35259abd026f251bcb79fcc7077c9843b0a5de21e222ac53877bb0e92647a
SHA512

352f14b3840029e14310ba9031ed9a291fb33e4ac3aa9ff644fefcea6775b0b527738204e20a0f1f8a522b6bfb43d1bd9cf52b33dc422f46b32a4c0e95920aa4
SSDEEP

192:1RQ9GnwR2MBAsrQceUwao8CRuJrRr5clI4pK8RGp/:ocnwR2MBLQceZaotRERS5NRGp/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c75c3c551b32728a7d57c4b2d5b1edd0_NeikiAnalytics

Files

c75c3c551b32728a7d57c4b2d5b1edd0_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

e836076a09dba03e4d6faa46dda0fefc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpSendRequestW
InternetSetOptionW
InternetQueryOptionW
HttpOpenRequestW
HttpQueryInfoW
InternetReadFile
InternetConnectW
InternetOpenW

kernel32

GetTempPathW
GetFileSize
GetCurrentDirectoryW
DeleteFileW
CloseHandle
WriteFile
lstrcmpW
ReadFile
GetModuleHandleW
ExitProcess
HeapCreate
HeapAlloc
GetModuleFileNameW
CreateFileW
lstrlenW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ