202405209fdbf40f659e5f819276af27893715e1cryptolocker_NeikiAnalytics | Triage

Sharing

General

Target

202405209fdbf40f659e5f819276af27893715e1cryptolocker_NeikiAnalytics
Size

41KB
MD5

9fdbf40f659e5f819276af27893715e1
SHA1

7439bb555e977721a33d02be7a02250285b5ce5a
SHA256

af6f56187e3c5d5495bad5424b17d202f40159c07c6ab0c28c9cbd575fd4f0d3
SHA512

7b9f5a002d80b6c50905feb8d2d590b8d5a97e67f561baa0b572056e8c2428c0851d74f37c63a14cdfd98a819b8da0217e14f8afdf51a6f59214017974a39859
SSDEEP

384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlxujsFwg:b/yC4GyNM01GuQMNXw2PSjHPbSuYlaJg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
202405209fdbf40f659e5f819276af27893715e1cryptolocker_NeikiAnalytics

Files

202405209fdbf40f659e5f819276af27893715e1cryptolocker_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

ad86a1414a0514f4c041167365378f70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndPaint
GetMessageA
DrawTextA
ShowWindow
UpdateWindow
DispatchMessageA
BeginPaint
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
GetWindowRect
LoadCursorA
PostQuitMessage
SetWindowPos

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
GetCurrentDirectoryA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ