bfbb481ca259b843e89deddaefe346d0_NeikiAnalytics

General

Target

bfbb481ca259b843e89deddaefe346d0_NeikiAnalytics
Size

11KB
MD5

bfbb481ca259b843e89deddaefe346d0
SHA1

8cf15dfab0f002e84b101a6289d19689e20296a8
SHA256

c8bac868f7dc501f96dee01cdd140d0132e67e515c13d771a9180ce375526bae
SHA512

f6c4f4d9f831984ad94b4da55045414cb1a0c01e84d4db635fc2916c9a356f4cbe14c98dc0c30cf561eeb1dc2183318fc8d496a52eb5b0ecb73a927e4312204f
SSDEEP

192:98StG0CkmrxTDVWrpHDyraZQFTZWC3a6B+FiNYXh2:9RtGvk2FVWljyYeWuDOGYR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfbb481ca259b843e89deddaefe346d0_NeikiAnalytics

Files

bfbb481ca259b843e89deddaefe346d0_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

685473f7d5bb3eda8ce6480094de8148

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr70

realloc
memmove
memchr
_initterm
free
__dllonexit
_onexit
_except_handler3
_adjust_fdiv
malloc

kernel32

DisableThreadLibraryCalls

Exports

Exports

ogg_packet_clear
ogg_page_bos
ogg_page_continued
ogg_page_eos
ogg_page_granulepos
ogg_page_packets
ogg_page_pageno
ogg_page_serialno
ogg_page_version
ogg_stream_clear
ogg_stream_destroy
ogg_stream_eos
ogg_stream_flush
ogg_stream_init
ogg_stream_packetin
ogg_stream_packetout
ogg_stream_packetpeek
ogg_stream_pagein
ogg_stream_pageout
ogg_stream_reset
ogg_stream_reset_serialno
ogg_sync_buffer
ogg_sync_clear
ogg_sync_destroy
ogg_sync_init
ogg_sync_pageout
ogg_sync_pageseek
ogg_sync_reset
ogg_sync_wrote
oggpack_adv
oggpack_adv1
oggpack_bits
oggpack_bytes
oggpack_get_buffer
oggpack_look
oggpack_look1
oggpack_read
oggpack_read1
oggpack_readinit
oggpack_reset
oggpack_write
oggpack_writeclear
oggpack_writeinit

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

685473f7d5bb3eda8ce6480094de8148

Headers

File Characteristics

Imports

msvcr70

kernel32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 192B

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 192B