21525d659bd054cbed1f5ace7b2b5d40_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21525d659bd054cbed1f5ace7b2b5d40_NeikiAnalytics
Size

3KB
MD5

21525d659bd054cbed1f5ace7b2b5d40
SHA1

66674079ddc47a3ba029d2af455ef4a00482d829
SHA256

2c41da4a27cc74e8983c45a20712270d0bb28eff51117f3ad77f9936ca540677
SHA512

733208ea477bd91c9eb7e5ad1b84b2b1ada78e435addfbf0ff604ad2c6ad60aca63baa6d8b1e37f9d188371fd64197971ab6005516f6ccef62be283c7a71a51d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21525d659bd054cbed1f5ace7b2b5d40_NeikiAnalytics

Files

21525d659bd054cbed1f5ace7b2b5d40_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 559B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ