b34cbe175a2e4a4f1865751915c20a20_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b34cbe175a2e4a4f1865751915c20a20_NeikiAnalytics
Size

12KB
MD5

b34cbe175a2e4a4f1865751915c20a20
SHA1

9af648c9ca28b137a9aa02e83907737706fdfaa9
SHA256

3368c41b8f08662e7fb190e5a42ae7f68d3fd5b9c84ebc9c1a83267d15888d96
SHA512

6ca2a8a607ba8bae47924b47980af08e55ec2c967d96894c85d2b3e14a2e75a0496c71bdec06f2183ec7548e5ba19774fb64a05299e1282220834dbcb634dd17
SSDEEP

384:xujLQJUc4LIaATYAJKaqCUinB0tcv1FVqab:xufQJUceI/RJKYDB0na

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b34cbe175a2e4a4f1865751915c20a20_NeikiAnalytics

Files

b34cbe175a2e4a4f1865751915c20a20_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

be6916a5f8f65672d313ce05dda29a1b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

x:\xrCPU_Pipe.pdb

Imports

kernel32

GetCommandLineA

xrcore

?fail@xrDebug@@QAEXPBD0H@Z
?Memory@@3VxrMemory@@A
?Debug@@3VxrDebug@@A

msvcr71

_onexit
__dllonexit
_except_handler3
__CppXcptFilter
_adjust_fdiv
strstr
free
_initterm
malloc
_strlwr

Exports

Exports

xrBind_PSGP

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ