f472e8d9148ca29ee9b7652daa04a600_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f472e8d9148ca29ee9b7652daa04a600_NeikiAnalytics
Size

10KB
MD5

f472e8d9148ca29ee9b7652daa04a600
SHA1

95df52aec53e9feefbdd5e236315a08b6dfa5b17
SHA256

b4ed89f920f460fdf255ef58f3a5165dc5ee62bd953b1d00296ce55e5ef9718a
SHA512

59b7593b3f06142fe3fee9b8460a56b443e534d3d83b0f62c0978ba573a3fcd1563c108c1cb6a167da0f8a6a2dc209d83ac6cdac21d3328a0525d638d73898df
SSDEEP

192:Y/D+drSBlI1Bc6YXS+h7f8+kpJJRFqKFHjLzc6nGZx:rHa8JJzqKF/U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f472e8d9148ca29ee9b7652daa04a600_NeikiAnalytics

Files

f472e8d9148ca29ee9b7652daa04a600_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

6fdde9ace8034dd8d46d20c6c64931d1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

carclw60

CARC__EnterInstance
CARC__ExitInstance
GOL$C2
GOL$25
GOL$FILLDATA
GOL$85
GOL$52
GOL$COPYFILL
CARC__StopRun
GOL$A8
GOL$55
GOL$VN_ASCII_SIGN_TABLE
GOL$58
GOL$D5
GOL$M5
GOL$S8
GOL$C8
_CARC__LibraryMain@12

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RCLID_TE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 458B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RCLEP_DA
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ