c3626f632d787441d798bd32cf308710_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c3626f632d787441d798bd32cf308710_NeikiAnalytics
Size

6KB
MD5

c3626f632d787441d798bd32cf308710
SHA1

f44e93165c922b259fadddfd4ad304af77a8a1b2
SHA256

0efec8a114f6deabbc9961e3ec26c9876c9dbe6de68bee7059215f8c75f264a1
SHA512

5c60c65803c41caae2e9a9b69b5c99ee4eefa667df96a679573cca980f6b62f7054b8335967fa9016e359243d336967e809c902138b6113e2d6cddd018ef82e4
SSDEEP

48:SsGp63gAST0cMLlD7prUlG9NzgJj8r/QuoMjNSsDrHU0CyLb+XqI0XFmvB22iRz7:VGEETrMLH5576M5/bLbjYJ2xGB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3626f632d787441d798bd32cf308710_NeikiAnalytics

Files

c3626f632d787441d798bd32cf308710_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

a23064e36a7cee786955ca6fd65d4af8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
MoveFileExW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 646B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 517B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ