a45bae91d8c8a075d82ca12be499cf00_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a45bae91d8c8a075d82ca12be499cf00_NeikiAnalytics
Size

6KB
MD5

a45bae91d8c8a075d82ca12be499cf00
SHA1

ac94db802a2f2521ea11f5e9eeabdcf14ae3c009
SHA256

ae6d12b61705d94d9a8cf6b0ee2d6533617cdccb7a149d3bb5bf4a60fd5ba1ad
SHA512

f21a839623fc009c84418a78b5957c0669fcd6444166256478cfb0216e89543c3133a8e15eb19217ba5d9f522ee9cd905f145003501be8d79bff95732f7024bd
SSDEEP

96:Ts1Wnnnynnnnnnnn6nnann7nnXnnbnnKniROxlmWZdZ/Y:YXY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a45bae91d8c8a075d82ca12be499cf00_NeikiAnalytics

Files

a45bae91d8c8a075d82ca12be499cf00_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

9afefbdd5421ff1ca011cede13cefa28

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
GetProcAddress
LoadLibraryW

user32

SendMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 455B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ