738aee7b80c6031456aaf73dfacedde0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

738aee7b80c6031456aaf73dfacedde0_NeikiAnalytics
Size

5KB
MD5

738aee7b80c6031456aaf73dfacedde0
SHA1

9cb380e352356978c6a34bcfb88d941fc9407495
SHA256

f0b5ccf95e1a74f9277e29acebe9b12867d0cce33b8fb308ae14fb7e95b32e1c
SHA512

6ef30a86a64f275bba21a35fd484a7db1a2cac280adea331689443c79ba39201af6d4274b2e985307e340daec108c2122601638b4f2b7cea60cf59efa874bfb1
SSDEEP

96:XprYDpKnI6wJ+Ls7guyHejyn/I9l0iaiq/jl:XUcA+ggd+W/If0i6l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
738aee7b80c6031456aaf73dfacedde0_NeikiAnalytics

Files

738aee7b80c6031456aaf73dfacedde0_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

acd1d84bd0e367458dab18494623671b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

user32

GetWindowLongW

Exports

Exports

rundll32

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ