6f0cf2530f4f56b510b1ccd7d769e310_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f0cf2530f4f56b510b1ccd7d769e310_NeikiAnalytics
Size

6KB
MD5

6f0cf2530f4f56b510b1ccd7d769e310
SHA1

07ef0c9845b27d244ee1c4cd5bb2815ba5136775
SHA256

ffd937cd3a5fba5d0cda1687ce0809d1e736b73549e44349833aa1b452b0b3d8
SHA512

e9f5a716d2ce0814b2d0860cab06ba897c1171eee75c6fa1a81316aaf417c2e6caba00f5d55a5405318e33f5c0da6b17d4032e928782b05c73408ac5de0faa07
SSDEEP

192:EHRh1epprfm0dckY1dM5JSrxwJ9K9rqdx875e:EHRO1fm0qkM+aa09rqdq7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f0cf2530f4f56b510b1ccd7d769e310_NeikiAnalytics

Files

6f0cf2530f4f56b510b1ccd7d769e310_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ