c912e49d3f086c5e12270758420aa330_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c912e49d3f086c5e12270758420aa330_NeikiAnalytics
Size

11KB
MD5

c912e49d3f086c5e12270758420aa330
SHA1

7613ba093566c8e05228337f95b5065b59234122
SHA256

8dc8050dab57e1462863a2d3c9b18f598e2a56d5c1a9ea56f40118622271127d
SHA512

b663d64ee410c8169a3c26f6d2c9447da6796de7519782083de3282de9cee367ab76f839c04e94df5d00c6af06e126c1427bc72d715d7efa392b70d274eed038
SSDEEP

192:C4XwmrKxPtimET7cGferNLbH++sARB7Xre2t0fkizdbIxh+:CB4KxPtHE0jXH++V7Tizdb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c912e49d3f086c5e12270758420aa330_NeikiAnalytics

Files

c912e49d3f086c5e12270758420aa330_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

a55b44868e62b3b172417aa943acc54b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
HeapReAlloc
FindResourceA
lstrlenA
LoadResource
HeapAlloc
HeapFree
GetTickCount
VirtualFree
GetProcessHeap
IsBadReadPtr
WriteFile
WideCharToMultiByte
Sleep
SizeofResource
GetModuleFileNameW
CreateFileW
lstrlenW
GetTempPathW
GetLastError
lstrcmpiA
GetProcAddress
VirtualAlloc
LoadLibraryA
LockResource
GetModuleHandleA
CreateMutexA
VirtualProtect
CloseHandle
DeleteFileW

user32

MessageBoxA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ