6706cca5ddac5953c83f7aa023c06820_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

6706cca5ddac5953c83f7aa023c06820_NeikiAnalytics.exe
Size

28KB
MD5

6706cca5ddac5953c83f7aa023c06820
SHA1

af62dda30657d160da83603eda29933dbc364fda
SHA256

b5776643f2677bf4df40dfc27266d4572c3eb4a099638f4f5bfdd16d1ba0fb1b
SHA512

116e2fe100fe1e7e1540281d58d9aa1f42ea184378cf7eb5c9c2dc18b652577b678076f22ac449dab713438d1a47d850bcf9156166a72435b38227c360930348
SSDEEP

768:/qPJtUA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKhJJhgc4:/q0A6C1VqaqhtgVRNToV7TtRu8rM0wYL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6706cca5ddac5953c83f7aa023c06820_NeikiAnalytics.exe

Files

6706cca5ddac5953c83f7aa023c06820_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE