cbfd8bec25e09e72bb05c8eb45b41810_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cbfd8bec25e09e72bb05c8eb45b41810_NeikiAnalytics
Size

6KB
MD5

cbfd8bec25e09e72bb05c8eb45b41810
SHA1

21bec1175ee4c6533f0f8452cb9fda4fe4c515ca
SHA256

eeeb916af68f92986178248216f4faa05db728fd33e016dbe9efbdb035dda22b
SHA512

f6baa4667a4e27c4adfe640fda393277a82611b93ca9cdc06d487011db4f5292f651f0ffe14eeb98a9674699322655e6473d84143a3943b85f6ff55bc8e124b2
SSDEEP

96:nEY2RrF1eqwi4rC0eMv6eFMJQEoONhVF:EHRh1epprR3eVzj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbfd8bec25e09e72bb05c8eb45b41810_NeikiAnalytics

Files

cbfd8bec25e09e72bb05c8eb45b41810_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ