173972d2536bfa479b4e21bb8f8b7f40_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

173972d2536bfa479b4e21bb8f8b7f40_NeikiAnalytics
Size

3KB
MD5

173972d2536bfa479b4e21bb8f8b7f40
SHA1

de2a22fa7603f10273ed87ef37b0aab5be0fb9ff
SHA256

8d0c4ec68b835cd5005d85066a826ad19c71b6bb8e341b4da0f15070b2f66a93
SHA512

9424464948fc97291f36fff13ba340b7bc005c317ba64cbbc2414ff067a552fd4a3d18efd6fd1f4f2ca90060421e49a7394be569fe030ea0d8b8f7ba82d0c37c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
173972d2536bfa479b4e21bb8f8b7f40_NeikiAnalytics

Files

173972d2536bfa479b4e21bb8f8b7f40_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ