0b6016b1db008f7c85ba21e45c8c8aa0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b6016b1db008f7c85ba21e45c8c8aa0_NeikiAnalytics
Size

467KB
MD5

0b6016b1db008f7c85ba21e45c8c8aa0
SHA1

fcebad8db0a9290f78405ae28f94bddde5dc46d0
SHA256

65cd780e5f897bb696814f56f48987f27ce3a94691bd39036f014f6f9a10edfe
SHA512

ba4f8d5cbeb7f589be332ac0ee482bf9c5faf11493259a35c710c9f0296f5912b2f75472ec0bd6d9da4b5bc9e0beb3193173e516dec66cebf9f235155149988b
SSDEEP

6144:Z+5xvqTfzMIwGvApHjz8u6aTTwgdhY3U7VAX8qHJlD4+72emaHq8Yj/FsJFtCaK5:ZyWVX9vkU1CsJFtdMoYbEjnGiO02fN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b6016b1db008f7c85ba21e45c8c8aa0_NeikiAnalytics

Files

0b6016b1db008f7c85ba21e45c8c8aa0_NeikiAnalytics
.dll windows:6 windows x64 arch:x64

494eb1e993d087d31dfeae37d5db18c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

ajBR.pdb

Imports

kernel32

CloseHandle
GetModuleFileNameW
ExitProcess
GetProcAddress
LoadLibraryA
GetModuleHandleA
K32GetModuleInformation

msvcrt

memcpy

Exports

Exports

CPlApplet

Sections

.text
Size: 462KB - Virtual size: 461KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE