0fcc718f5e721b790d12acfe7524aa00_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fcc718f5e721b790d12acfe7524aa00_NeikiAnalytics
Size

6KB
MD5

0fcc718f5e721b790d12acfe7524aa00
SHA1

892ff6bd0436846e23f2a99236effab9f6c37ca0
SHA256

a6326cfb2a4b38f3994e39cb7615ee5c9ca8f7ecd46fa162a5264893d028527d
SHA512

d6368ed818d6aef6dc5a904f61ff207c7a15564d225ac91ee043779d60c0d43b3297924d69787526fdb0e1be74cc42f018a7956f6c6e1f47bc26175bbfb25620
SSDEEP

96:DixZjmjtjd8jPjcZGR5TI6DqIEkmPuc7T/byuHtxZryGSwdZbjhxJ9ssk7k:unSR6bgYT2IF8LGuHtxgwTFxJ9sBo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fcc718f5e721b790d12acfe7524aa00_NeikiAnalytics

Files

0fcc718f5e721b790d12acfe7524aa00_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ