1bcaf59cf3d8223b69c47e9b7fff3040_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bcaf59cf3d8223b69c47e9b7fff3040_NeikiAnalytics
Size

297KB
MD5

1bcaf59cf3d8223b69c47e9b7fff3040
SHA1

e93118608ced5409eea4b4cdeab6d67f997f84d6
SHA256

c3642e54ab8a168641b28b4e4b8d13a7cb2d128aa69dd4d25166ebc32c0b7c9a
SHA512

4590723fd5857b6ce5d4cc8d2aa62eea22ee199643b65b73b34232f95421daab4e19565cae48d4e418fc30ac0c21831c772aa67547d19e7f6db592f4e3c314be
SSDEEP

6144:e1lBXuUJ+Qo4d6PkB0Qt+7RXlR98nW7Ve6neBxtG:bis4d8kBelD676n6xg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bcaf59cf3d8223b69c47e9b7fff3040_NeikiAnalytics

Files

1bcaf59cf3d8223b69c47e9b7fff3040_NeikiAnalytics
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

GPBExecutePack

Sections

CODE
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 13KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 75B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ