c8830ff822a02fa74f20e774d8618cf0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8830ff822a02fa74f20e774d8618cf0_NeikiAnalytics
Size

40KB
MD5

c8830ff822a02fa74f20e774d8618cf0
SHA1

82f1c25abf02a5448d04d1a1451091e08f09ec86
SHA256

f3145dd42c23a408be820ed8fb30c25a823b4e5ce42ede78dfa025201a835168
SHA512

f52605b576ab52a93cea2efb3d2040f921ab75933e76686193274aab956df88d1416d590be9191913706f7000ac17b3faf15dc4b4d2a2d3261030f3149d5637e
SSDEEP

384:tenCcGoSG6EoaggaA4emASI3vXlopLcempk8jP5COY+bep:yddhFabemDI3vXlopoemCEP5+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8830ff822a02fa74f20e774d8618cf0_NeikiAnalytics

Files

c8830ff822a02fa74f20e774d8618cf0_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

45b6cd3dd84080d00ea745fca641ea0d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA

msvcrt

strncpy
strstr
malloc
printf
free
exit
memset
_open
_read
_close
_initterm
_adjust_fdiv

sapphire_ae

sapphire_main

shlwapi

PathFindOnPathA

Exports

Exports

main

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ