dd1a8d3da10d8bed2e6d855e1b3b4ba0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd1a8d3da10d8bed2e6d855e1b3b4ba0_NeikiAnalytics
Size

32KB
MD5

dd1a8d3da10d8bed2e6d855e1b3b4ba0
SHA1

8353cb237c39e6a9cc3e498e7f1f6cef7a16d29d
SHA256

6876517e81ced2e7a8877b1d20f7d7fc2f9ff92df477784071f536081b76b38e
SHA512

bc12d0e31a4972bdcf63914b7b34622290ba994b389fc02e31b9e2c2a49a5c45e59da1c7ad289d1b2088098c76aad5e250c8a57838378d6bb12acb4c76e30387
SSDEEP

768:/qPJtHA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhJ:/qnA6C1VqaqhtgVRNToV7TtRu8rM0wYp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd1a8d3da10d8bed2e6d855e1b3b4ba0_NeikiAnalytics

Files

dd1a8d3da10d8bed2e6d855e1b3b4ba0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE