8e8c8b8941b73ce9f3ad4eb7319335e0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e8c8b8941b73ce9f3ad4eb7319335e0_NeikiAnalytics
Size

7KB
MD5

8e8c8b8941b73ce9f3ad4eb7319335e0
SHA1

19eb1ffd47be40892532cc1f4bf30a3df941c60a
SHA256

d17b8a2c6b6c8e3a24b468c959e523d934cf8e3e37cad7255e3f0e1f8e60ea98
SHA512

ad5a229ff80864608f4f01443df6666482a53e5e5ff0a701514fd9d9ce548b5d63819fe5714cafee03f0911bf7a009e9c2736f38c85265b98f867f6f9e3d1728
SSDEEP

48:aDXl1qEqevmVglLXkPbIVwhMXrDhMveiJMwKMRuqSOB:yqevmVGgPkVwyDQeiJMwKsxr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e8c8b8941b73ce9f3ad4eb7319335e0_NeikiAnalytics

Files

8e8c8b8941b73ce9f3ad4eb7319335e0_NeikiAnalytics
.dll windows:6 windows x86 arch:x86

514c6c98ada0bc59a07c38ac0cfc03ab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

fwpuclnt

FwpmFilterEnum0
FwpmFilterDestroyEnumHandle0
FwpmFilterCreateEnumHandle0
FwpmEngineClose0
FwpmFreeMemory0
FwpmFilterDeleteById0
FwpmEngineOpen0

kernel32

GetModuleHandleA
DisableThreadLibraryCalls
GetProcAddress
VirtualProtect

Sections

.text
Size: 1024B - Virtual size: 590B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ