325ca50ee4b8a63bb8d39b3cfee35f6113456838dec88aa5f70e619290ab4c8f_NeikiAnalytics | Triage

Sharing

General

Target

325ca50ee4b8a63bb8d39b3cfee35f6113456838dec88aa5f70e619290ab4c8f_NeikiAnalytics
Size

66KB
MD5

be055f3b82f8af579a48ec3c93eeed80
SHA1

3a6cbfc985759b1165b64f4db13dd6c49dca8d38
SHA256

325ca50ee4b8a63bb8d39b3cfee35f6113456838dec88aa5f70e619290ab4c8f
SHA512

ec3cf2a3c7e47b4bd7a5f196e74ade63d2fc38be974bb80dc317e5472e3c9f7ad99c4891181c10653a50a9c477f6748e9481e331c99407ceb5eb5ded987ba6ff
SSDEEP

768:ErzwvKnNCzPFU7afR9g3/jbP+WbUk87ZD7k14/4FLBx/1:EzNkfRY/o7k124FLBx9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
325ca50ee4b8a63bb8d39b3cfee35f6113456838dec88aa5f70e619290ab4c8f_NeikiAnalytics

Files

325ca50ee4b8a63bb8d39b3cfee35f6113456838dec88aa5f70e619290ab4c8f_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE