9b2464728fd4d12a0a5cf695b78d8600_NeikiAnalytics | Triage

Sharing

General

Target

9b2464728fd4d12a0a5cf695b78d8600_NeikiAnalytics
Size

7KB
MD5

9b2464728fd4d12a0a5cf695b78d8600
SHA1

7db1484931319c1bd15626cdbe4d18736bb87193
SHA256

9fee08afd07b337905130aad7f6cfba3dbbdf8d8976c663b0b768a5d2805fc98
SHA512

fa0cfb8111270522efeb40e468600ee10d0e2c348129d31876d222819a496da551eec8cc8a4e6712bbc44b9b38f8b14ba3ea1a64125482572bf9515c20828514
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIWeM7Z0rdbbaDEDrZXfBXGDk:unSR6bgYz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b2464728fd4d12a0a5cf695b78d8600_NeikiAnalytics

Files

9b2464728fd4d12a0a5cf695b78d8600_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ