93b04a96316a5f483ed72e620348c5b0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

93b04a96316a5f483ed72e620348c5b0_NeikiAnalytics.exe
Size

74KB
MD5

93b04a96316a5f483ed72e620348c5b0
SHA1

c5ae5ec9140d1cc78a1e8dd1f48822a6272ddcd9
SHA256

47d1185a0b0f44c98abeaa4ad7b5a89f4b4688a16859fd8b7d3e9286143e3ee8
SHA512

74c5d939b15a8ef47add4151b5c076d2e0ee3470d0e66d15ca88cbd21d5f5f8d36b98e9bad931912b52e55c8dc7264d4d8898b1695ad4404ea16450b77368b6b
SSDEEP

1536:1YF8NLCofRLCg/pdsHT+obdo8Cgzvl4ooofgke253u2xI:uF+LCofRLCgxSzXo8CgpIo53u2a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93b04a96316a5f483ed72e620348c5b0_NeikiAnalytics.exe

Files

93b04a96316a5f483ed72e620348c5b0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE