098a7e0a51e4d87306b239d85f97bd65c5411c3502794e6d6255c15c3b0da811_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

098a7e0a51e4d87306b239d85f97bd65c5411c3502794e6d6255c15c3b0da811_NeikiAnalytics
Size

26KB
MD5

fe3d2ff537dd4994d6ecee9cf5da2e30
SHA1

ae2479ed6cfb3fb9779cae9ac6e970ef26ae103d
SHA256

098a7e0a51e4d87306b239d85f97bd65c5411c3502794e6d6255c15c3b0da811
SHA512

f12b695461c308b648c747307185d989f644b72cbe7555a9dda77d2c33522dd391d767902258d33349eaa9ad8b8d0e875800f041fcf00121b9dfcbe62c0d6db4
SSDEEP

384:ErzP/9VY21fumm2u/unLYcckYef2gkHh7w3OjvBPlO6i8ZORE0N3hCj9Z:ErzFfumm29niC2XH4ivPOX8ZO60PCD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
098a7e0a51e4d87306b239d85f97bd65c5411c3502794e6d6255c15c3b0da811_NeikiAnalytics

Files

098a7e0a51e4d87306b239d85f97bd65c5411c3502794e6d6255c15c3b0da811_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE