2676258d776f2ab8a5b12d814a690230_NeikiAnalytics | Triage

Sharing

General

Target

2676258d776f2ab8a5b12d814a690230_NeikiAnalytics
Size

3KB
MD5

2676258d776f2ab8a5b12d814a690230
SHA1

c71210afddcea1ab30caf6df17011dde1f49f09e
SHA256

a75af2701ed7ff92f5e84be8973aceb0698c8e360c0ddc0baeb342fc1120337b
SHA512

bd0e380f3671d93626a6b53186a82cc0268c34a19b4279b33cdb9fe2e9a69dd02e4a0e2f413b9d3e325023035bd1125964a000e993e9cadcb6637d8ff65f1a23

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2676258d776f2ab8a5b12d814a690230_NeikiAnalytics

Files

2676258d776f2ab8a5b12d814a690230_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

0edb7976d2b004634887852fd95b0b95

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetLastError
VirtualAlloc
ExitProcess

shell32

ShellExecuteW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 539B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 449B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ