be506388026be03308bc616c02886f90_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be506388026be03308bc616c02886f90_NeikiAnalytics
Size

8KB
MD5

be506388026be03308bc616c02886f90
SHA1

4e11f052b8e33b736772b4abcf0a0a44f60fb3c3
SHA256

8f648d66cf37dc35bdfc1ce617170cfd7dc145f50c1ae386fd447114e14f5620
SHA512

ce5a57c7e4fd2f18dfa6a95d406aa2ca458748f849dc5b9a8e6b20d8741a4019bf74d6856779b2b775cde3b552f84d1b29e84239ddfd2f311bdd214bc5886b68
SSDEEP

192:qmUWKs/F5nKfzvzrXkC6DEUyU2wX/BzvX+:fK+FVKfzLrb6DEOpi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be506388026be03308bc616c02886f90_NeikiAnalytics

Files

be506388026be03308bc616c02886f90_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ