49f0c12f3eea3f5f4aae0be47a3fda50_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49f0c12f3eea3f5f4aae0be47a3fda50_NeikiAnalytics
Size

24KB
MD5

49f0c12f3eea3f5f4aae0be47a3fda50
SHA1

d950e4ac28f977320b02e943ac0ca77667304ff4
SHA256

da71dc788ebd4567fc6f3a578ec60c4b334bf309e9f70fcff1eaf2673a49f5c6
SHA512

7ed02cabd19e07db46449c74b8f1290f75cd18b5c9a9b2b8235d8eaeaf43cf247a8fba71228749b251cfd35e088e1dd8e8994f350656609d3ef0ba2f402ed943
SSDEEP

192:LzbKFdN5Nv9vDRrTU3uugEhrRhSxw/70MaNiwoph9DsK:nbihNv9rBUer4RhSaj0BQTph9DsK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49f0c12f3eea3f5f4aae0be47a3fda50_NeikiAnalytics

Files

49f0c12f3eea3f5f4aae0be47a3fda50_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

0a04cb3011da1a88605c75a23e73402a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
DisableThreadLibraryCalls

msvcrt

fclose
fwrite
fseek
fopen
fread
strncmp
ftell
_initterm
malloc
_adjust_fdiv
free

ulzwlib

uLzwCompressEx
uLzwDecompressEx

Exports

Exports

uGifCloseReadFile
uGifCloseReadFileEx
uGifCloseWriteFile
uGifCloseWriteFileEx
uGifGetImageInfo
uGifOpenReadFile
uGifOpenReadFileEx
uGifOpenWriteFile
uGifOpenWriteFileEx
uGifReadFile
uGifReadFileEx
uGifReadImage
uGifWriteFile
uGifWriteFileEx
uGifWriteFileSetLossy
uGifWriteImage

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 970B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ