9952c0a6bf6763f902e4a36422e3ed70_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9952c0a6bf6763f902e4a36422e3ed70_NeikiAnalytics
Size

6KB
MD5

9952c0a6bf6763f902e4a36422e3ed70
SHA1

bf68fa6ccec0d586dbd4f68637ad570b4783482b
SHA256

7867ac8565237a4f474a060db55f39b35132bc6406835392cf230a78739b20bf
SHA512

4c74df2eddfb8c659c36e9929d2a5e5f09f2ba55ce2f1dae23f796ca82475b951633084a1e5b864e8fd044460115dec0129d56b57f7c2668dd3a1b7a97c205c3
SSDEEP

96:DixZjmjtjd8jPjcZGR5TINn4DCnG/2eHR/zb1O1ING3RdANwx15i:unSR6bgYs4DCnGeeH9t0Rcwj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9952c0a6bf6763f902e4a36422e3ed70_NeikiAnalytics

Files

9952c0a6bf6763f902e4a36422e3ed70_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ