dc223f528e05ed20ed6258a4c817db30_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc223f528e05ed20ed6258a4c817db30_NeikiAnalytics
Size

47KB
MD5

dc223f528e05ed20ed6258a4c817db30
SHA1

36d063855dcc8921789f3ab4ad2a32b1d83f9398
SHA256

328304d0a97417b7787ee39e795c4b95061a5537fb7eebd5d8be484af648829c
SHA512

4c33eeb4b3d4b53ff66c7a4d8eadddffd17be08a167f8eaf95de208ce62dde103c57ab09f6597d25fc5724854c0633a00affba9375c18dac93b9192ea924e3e4
SSDEEP

768:hpWtmI61iJ53IlqwGX3xyL82Ib1aFzHN6alTcobOJEIhqqwCH2Uw8b0:hpWO1sEqwMT5azYalxbgdwTr8b0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc223f528e05ed20ed6258a4c817db30_NeikiAnalytics

Files

dc223f528e05ed20ed6258a4c817db30_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

6a368c7abc6384cf09e2a2845acb6b97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
Module32Next
Module32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GetProcAddress
GetModuleHandleA
ReadFile
GetFileSize
CreateFileA
Sleep
ExitProcess
GetModuleFileNameA
CreateThread
CreateMutexA
OpenMutexA
GetStartupInfoA

msvcrt

malloc
_except_handler3
free
realloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strstr

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ