a11dfe43e83f8a580264740be5ead380_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a11dfe43e83f8a580264740be5ead380_NeikiAnalytics
Size

6KB
MD5

a11dfe43e83f8a580264740be5ead380
SHA1

bacfa2cda14f0f0bbfb5e1a6c7bdd439fb589235
SHA256

b92092647581f014c4af89ed5c2c421f73ffea1399da3a0086df8e476872fd3a
SHA512

7c2e4eff0e9c7f6a0050212e164a57b9812b57f1254d7926fcc7001beb762e2aea21e55f858798e406514a9a1cc9f7014fc71ba7fa48ef9148f3c3ea4b241aa0
SSDEEP

96:FtrRdrY0x7+PZmQ41IcmHx/uk3bXP2TzLo3bTuHi6MXgW6/3M:Ft11+PUQ41kx/uGfOS7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a11dfe43e83f8a580264740be5ead380_NeikiAnalytics

Files

a11dfe43e83f8a580264740be5ead380_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 778B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ