e1487cc9597e50c6eec10bdff0106030_NeikiAnalytics | Triage

Sharing

General

Target

e1487cc9597e50c6eec10bdff0106030_NeikiAnalytics
Size

11KB
MD5

e1487cc9597e50c6eec10bdff0106030
SHA1

73a0358a7d9dd38f78b52fa7906e7901fd85bde4
SHA256

eee86f40fb36121d7c19a67786fb866e09595a2850438e19694a6c53e73c06ea
SHA512

1aa28480e70155d759b1e1ac33ad6ec7771f4c47c663cafd2fee41fb35061e70322a7787e2de306f1650b430b74f6883eb46168a22baafcdf79b8c830c802400
SSDEEP

96:6PX+OC/Xcz34BDRtmckygaHe2SaBO/6O9g4g1g4:6rC/TBNtmhyg6e2LEJyg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1487cc9597e50c6eec10bdff0106030_NeikiAnalytics

Files

e1487cc9597e50c6eec10bdff0106030_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

7b374fbbc30f64eae2c88e5699283a53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetComputerNameA
FindResourceW
GetModuleHandleA
lstrlenA
CreateFileW
GetCurrentDirectoryA
CloseHandle
SetLastError
CreateProcessA
LocalFree
HeapCreate
Sleep
lstrcpyA
PulseEvent
UnmapViewOfFile
LoadLibraryW
GetCurrentThreadId
GlobalUnlock
FindClose

user32

CallWindowProcA
SetFocus
DrawEdge
GetDlgItem
DrawMenuBar
FillRect
CreateWindowExA
GetDC
CreateIcon
GetCaretPos
CheckRadioButton
IsWindow
DispatchMessageA

cryptui

CryptUIDlgCertMgr
CryptUIDlgSelectStoreA
WizardFree
LocalEnroll
CryptUIDlgSelectCA

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ