d02a0652702ca8ab0811941415771e50_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

d02a0652702ca8ab0811941415771e50_NeikiAnalytics
Size

1.9MB
MD5

d02a0652702ca8ab0811941415771e50
SHA1

7c5a3046be39729040345a4423e528c17d096ca6
SHA256

ac14cc8e0a05fc9dd5b3dfef971e955ed71531f99aec6e66f91e6807e2f1d938
SHA512

436c7f6b393515abbfe5370a84a700ff369d7ab89f1c98fb056d5dc728235cab9f3d104e9ffa1efea40e6427a743ca36b9d79e5e730311b92cb0a9c583b79c37
SSDEEP

12288:xc5PCbh7JyPH4AKCMpc51l8FDO7/IITQekQeGbblrmOhA2LrN+szGvCzesYrad0H:xuKbBJy/hMpc5IFi7ZS/IMc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d02a0652702ca8ab0811941415771e50_NeikiAnalytics

Files

d02a0652702ca8ab0811941415771e50_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

96a8ec412858a637750b430c36c75b02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free

kernel32

DisableThreadLibraryCalls

Exports

Exports

sal_010_enc8060_datos_dwg_2d
sal_020_enc8060_be_datos_dwg_2d
sal_020_enc8060_di_datos_dwg_2d
sal_030_enc8060_al_datos_dwg_2d
sal_030_enc8060_co_datos_dwg_2d
sal_506401614_datos_dwg_2d
sal_506403110_datos_dwg_2d
sal_506403810_datos_dwg_2d
sal_5a3046c00_datos_dwg_2d
sal_5a3047c00_datos_dwg_2d
sal_5a3050c00_datos_dwg_2d
sal_5a3058a00_datos_dwg_2d
sal_5a3146c00_datos_dwg_2d
sal_5a3150c00_datos_dwg_2d
sal_5a3446c00_datos_dwg_2d
sal_5a3447c00_datos_dwg_2d
sal_5a3450c00_datos_dwg_2d
sal_5a3458a00_datos_dwg_2d
sal_5a3547c00_datos_dwg_2d
sal_5a4447c00_datos_dwg_2d
sal_5a4450c00_datos_dwg_2d
sal_5a4458a00_datos_dwg_2d
sal_5a4546c00_datos_dwg_2d
sal_5a4550c00_datos_dwg_2d
sal_5a4646c00_datos_dwg_2d
sal_5a4746c00_datos_dwg_2d
sal_5a4750c00_datos_dwg_2d
sal_5axx46c00_datos_dwg_2d
sal_des_lavabo_pvc_datos_dwg_2d
sal_r_aloa_datos_dwg_2d
sal_r_art_60_datos_dwg_2d
sal_r_berna_datos_dwg_2d
sal_r_coral_n_datos_dwg_2d
sal_r_diverta_47_datos_dwg_2d
sal_r_diverta_75_datos_dwg_2d
sal_r_diverta_datos_dwg_2d
sal_r_fontana_datos_dwg_2d
sal_r_gira_56_48_p_datos_dwg_2d
sal_r_gira_63_50_p_datos_dwg_2d
sal_r_gira_70_55_p_datos_dwg_2d
sal_r_urbi_1_datos_dwg_2d
sal_r_vict_52_41_p_datos_dwg_2d
sal_r_vict_56_46_p_datos_dwg_2d
sal_r_vict_65_51_p_datos_dwg_2d

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

96a8ec412858a637750b430c36c75b02

Headers

File Characteristics

Imports

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 1KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 1.9MB - Virtual size: 1.9MB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 4KB - Virtual size: 1KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 1.9MB - Virtual size: 1.9MB

.reloc
Size: 4KB - Virtual size: 2KB