5c05288a50b088a4109433991dcb2300_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c05288a50b088a4109433991dcb2300_NeikiAnalytics
Size

4KB
MD5

5c05288a50b088a4109433991dcb2300
SHA1

45a0659a52e3d8af0fb2a040a5e9c742e43b2472
SHA256

0d019f7d82633690a93af4036843f851afae4b62e4ce70ac4bbd5ab84548a345
SHA512

a0761239c14ebd017d4595e3e32070d0dd9947a536c41e41052da0851f7bb2ea6cb352d5de6dd3946ff143881b760c2c8ab019ed89d5cbb1507cc699f955b8c4
SSDEEP

48:q0Z48j1gA5YHofrhWR0/iIsipbYtDfXgOrnsB/S+0cmXrSh5LPesIL:1tRn5cofrY06I/VY1no0VW6sIL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c05288a50b088a4109433991dcb2300_NeikiAnalytics

Files

5c05288a50b088a4109433991dcb2300_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

b8601f8d90f855e2cf7d421082f246ab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
GetModuleHandleW

user32

DestroyMenu
DestroyWindow
DialogBoxIndirectParamA
DialogBoxParamA
DispatchMessageA
DlgDirListA
DlgDirListComboBoxA
DlgDirSelectComboBoxExA
DlgDirSelectComboBoxExW
DlgDirSelectExA
DragDetect
DragObject
DrawAnimatedRects
DrawCaption
DrawEdge
DrawIcon
DrawIconEx
DrawMenuBar
DrawStateA
DrawStateW

Exports

Exports

?aewtrwtwaaaa@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?fafkaslkjdfakdfljsalfdddddddddddddddjal1@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?fafkewrwerwrwjal4@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?wtrwtwetwetwtaaaa@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
fafkewrwerwrwjal
fafkewrwerwrwjal1
fafkewrwerwrwjal2
fafkewrwerwrwjal3
rundll32
rundll32r

Sections

.text
Size: 1024B - Virtual size: 1002B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ