ca6ec67e595908322575de5c62055e20_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca6ec67e595908322575de5c62055e20_NeikiAnalytics
Size

6KB
MD5

ca6ec67e595908322575de5c62055e20
SHA1

34db8e882b313c41c65ee10195d8e51ea8d88385
SHA256

82f695512eacf92bab7f08799aa2d5b75ea97bdb5e26da213a827d5b34225446
SHA512

af2f740279f9ae6937ebc1a949d6b13535d33435b55e99b2b24728dcbf88b72b831868262af3eb3f44b00d5ba2ee7f434735635b2185c9fb65291ed6abe2169e
SSDEEP

96:Ts1Wnnnynnnnnnnn6nnann7nnXnnbnnKniRORAn1U1V:YXIA1s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca6ec67e595908322575de5c62055e20_NeikiAnalytics

Files

ca6ec67e595908322575de5c62055e20_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

9afefbdd5421ff1ca011cede13cefa28

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
GetProcAddress
LoadLibraryW

user32

SendMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 455B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ