4b47ecb0f99ace63db0096203f4eee20_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b47ecb0f99ace63db0096203f4eee20_NeikiAnalytics
Size

220KB
MD5

4b47ecb0f99ace63db0096203f4eee20
SHA1

fd97c5fbe7d122fd12c39601f18087b584384c10
SHA256

8ef61588f1fcd458acfd7d05c9d3b43feab07b52f942417a08c06a10d3addcf0
SHA512

3ad048daaa8b43ab3d3b5d58cb75cf9a93910e2a31777f21127c88d0807a39f742913b8013fbc654f8eca4e655013a03c31379add15223640090c7519dc9a749
SSDEEP

3072:wKlwVA/43NnWbDxo93OlRWL8Lf21EG2re66Sgb2xMVv6sRyu0:9Sr3soeH3f666ZL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b47ecb0f99ace63db0096203f4eee20_NeikiAnalytics

Files

4b47ecb0f99ace63db0096203f4eee20_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\dw_tool\FriendList\JceEncoder\Release\JceEncoder.pdb

Sections

.text
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ