cbe52d54ed1c0a5af5de79e39a4be740_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cbe52d54ed1c0a5af5de79e39a4be740_NeikiAnalytics
Size

3KB
MD5

cbe52d54ed1c0a5af5de79e39a4be740
SHA1

164a84dab11b15e5f445939db54a3aeeb467ee3e
SHA256

630389cd62402a8d8408d143ab1ebe8fb289c0f321089f2ce12289635d2afa2b
SHA512

8b90624077222e434308f6ba1e839e8b893e7f6acd06a6636576635ea8c330e8b0f4c552296ac0e0291ea2a8d473a3c00b2b0502bc1490c21fd5d6c9abe4b003

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbe52d54ed1c0a5af5de79e39a4be740_NeikiAnalytics

Files

cbe52d54ed1c0a5af5de79e39a4be740_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ