0d717df68587b7e30fa4fa5f505c7320_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d717df68587b7e30fa4fa5f505c7320_NeikiAnalytics
Size

6KB
MD5

0d717df68587b7e30fa4fa5f505c7320
SHA1

866f0fa511cf7bab6e0a6cc8fe0b4f9199b4e609
SHA256

ab59ab4be4c2ba952d51bbb9d9e216d5227893c260d74dfb0d87098f31e586ca
SHA512

709a7f144428a9960cfc8b688172b6e089dfc45b6dd6783e98cc315f12b89535e110534e794b556ad1702a722974e2ae6f7cc6893b5e5492eb4933e329b7d0e1
SSDEEP

96:PIV9yIjhsZrg0j6I/AhWNi+ga9S6jTS6BqMVe8ZlO:PyIIjWXGhq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d717df68587b7e30fa4fa5f505c7320_NeikiAnalytics

Files

0d717df68587b7e30fa4fa5f505c7320_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

8e774e903ff75d3d78866ccd64b23f30

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryW

user32

DialogBoxParamA
DlgDirListA
DestroyCursor
DestroyIcon
DestroyMenu

Exports

Exports

?adddda@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?daaaaaaaaaaaaaaaaf@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?ddddddddaaaaaaaaaaaaaa@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?saaaaaaaaaaaaaa@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?sadsssssssssssssa@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?ssssssssssssssssssssssssss@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 922B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 877B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ