cd42d20892cb3d33c6e1e928064b3d70_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd42d20892cb3d33c6e1e928064b3d70_NeikiAnalytics
Size

73KB
MD5

cd42d20892cb3d33c6e1e928064b3d70
SHA1

068a694f42d26fc16937759b777d683b1106a174
SHA256

1bbf507d37bbb35f16d9172e01d505f7f71fb91c5bc02628f84b62f3b6a92136
SHA512

dc43403e8520b7bed1993022e157c80958c473ba1ae8cfd8414bf4b299d66a8193e9f022fd147004ab425c0e3969d6fb6c3083e9b70d62ecfdf02b1a6a6acc4d
SSDEEP

1536:1YF8NLCofRLCg/pdsHT+obdo8Cgzvl4ooofgke253u2D6:uF+LCofRLCgxSzXo8CgpIo53u2D6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd42d20892cb3d33c6e1e928064b3d70_NeikiAnalytics

Files

cd42d20892cb3d33c6e1e928064b3d70_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE