e6c065af14ca982d314c8268078ce790_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e6c065af14ca982d314c8268078ce790_NeikiAnalytics
Size

6KB
MD5

e6c065af14ca982d314c8268078ce790
SHA1

8e713e4865769e0106d1dca1dbe64ab13e60dd23
SHA256

64426765f771471bda930ceb5bc26228bc6242d519ffa727c5f237f4c0697e99
SHA512

5da0df17254c65c6dd0a00397350f4a67d8299fab75c575f82b37b464bae9167909cc4a62fc2a6fa10edcb4058b1765c4f827bf3b1c6a9c85f39ca148772f5da
SSDEEP

96:nEY2RrF1eqwi43BtUkp9fi+XTDlWwP+FbwSi3Wa:EHRh1epp3Btvp9fx3laFJim

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e6c065af14ca982d314c8268078ce790_NeikiAnalytics

Files

e6c065af14ca982d314c8268078ce790_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ