977facb99414bca644dc328e26169a90_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

977facb99414bca644dc328e26169a90_NeikiAnalytics
Size

3KB
MD5

977facb99414bca644dc328e26169a90
SHA1

c94ff0b1b7bdb076d622212b61a208398385fc95
SHA256

60c232e116e324e8a49aba3fc24aa5b37b0236748390bd196e68081b30fc3c16
SHA512

8eb5b9701efc74e634e22a9ae8897528dc4b59babfd57a45fe31c0f0d893193a4861c9766f79331b4fe3a73bf1469294b567d3c6d3ea31017fcab32f9b7fa960

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
977facb99414bca644dc328e26169a90_NeikiAnalytics

Files

977facb99414bca644dc328e26169a90_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ