9437ef941e0b4bea583dbf7716188c00_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9437ef941e0b4bea583dbf7716188c00_NeikiAnalytics
Size

3KB
MD5

9437ef941e0b4bea583dbf7716188c00
SHA1

f2d831b5f589b7c12f230f5330f1645051377dea
SHA256

91d0a4a02fd57921393c0eff973e8410df356b88f164568baead576c693e6ec3
SHA512

a85033822aaf6df837bcecb615f9f9ae5feb58968baf3ac50378b108afba0fc1579932fb6ba9a8fa9d282d09c0353e37142143009f503ab3eddd7e64ccf5b9f8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9437ef941e0b4bea583dbf7716188c00_NeikiAnalytics

Files

9437ef941e0b4bea583dbf7716188c00_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ