2583d8352dce374e28dfab63db2a9500_NeikiAnalytics | Triage

Sharing

General

Target

2583d8352dce374e28dfab63db2a9500_NeikiAnalytics
Size

6KB
MD5

2583d8352dce374e28dfab63db2a9500
SHA1

ae428ffbc43c291733612d43380a31a4f7d0d512
SHA256

f5c849209af8dbf0dd2e65b709edc6cbc74d51b38e35018a0debf066730d13b3
SHA512

a315476d313b88d750621e2afa1af129d1b2b24b3914aadc4f09612edfd8b07b818641484b87eaf76c444db53dd9dfcec5a61e1b48daeaa5a14c593fe77649f7
SSDEEP

96:PIV9yIjhsZrg0j6I/AhWNi4JJauwo4RYpZJ4K/afokuVwRpuTJm:PyIIjWXGhqr/Jwo1ZmKygkuuRph

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2583d8352dce374e28dfab63db2a9500_NeikiAnalytics

Files

2583d8352dce374e28dfab63db2a9500_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

8e774e903ff75d3d78866ccd64b23f30

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryW

user32

DialogBoxParamA
DlgDirListA
DestroyCursor
DestroyIcon
DestroyMenu

Exports

Exports

?adddda@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?daaaaaaaaaaaaaaaaf@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?ddddddddaaaaaaaaaaaaaa@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?saaaaaaaaaaaaaa@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?sadsssssssssssssa@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?ssssssssssssssssssssssssss@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 922B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 877B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ