d05e63636ffec210469e1e0e6cb198f0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d05e63636ffec210469e1e0e6cb198f0_NeikiAnalytics
Size

6KB
MD5

d05e63636ffec210469e1e0e6cb198f0
SHA1

1804da147056a7e4dfb74de3c16b8d9867f3a4e4
SHA256

fb737f7460cb53038b51df3756b0d4abcfe6cb9316fd38fa4a4095486838cd56
SHA512

e9534240b3dd47cdabf19c36d899444479eefc23b2b1db84d14a0c314532f626d47bb990267d447dea1a97cbe3556c5f4397bf838f8ec1351ac1df04cdbfaee7
SSDEEP

96:VGEETrMLH5a3JImcgIdwu5lIFjpLFAZvv34Tq1:efMU3CmcgNHjpJARvz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d05e63636ffec210469e1e0e6cb198f0_NeikiAnalytics

Files

d05e63636ffec210469e1e0e6cb198f0_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

a23064e36a7cee786955ca6fd65d4af8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
MoveFileExW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 646B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 517B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ