1bec258ae22664d5280d30b637d88c1d059f1dc8ec3472da3551960c138ee641_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bec258ae22664d5280d30b637d88c1d059f1dc8ec3472da3551960c138ee641_NeikiAnalytics
Size

1.6MB
MD5

fb9907938478e73c2dd407a0541fe910
SHA1

03a8a6dd54382fac46b5efd6b3ba8796914a038c
SHA256

1bec258ae22664d5280d30b637d88c1d059f1dc8ec3472da3551960c138ee641
SHA512

dab0c5a6ebc9532fa3189fce36a6e01a28dc3563c75f311a81eff027f41675c08d95c24f3b4f1faf6e69947a298edb3003d498cf6c7cd5caab160a74e3a11add
SSDEEP

24576:Ye57wQtSQEIyMacmYyXxz+YxiB6syA9dPOdunn5NrFk5bj1Lu10KI6GURJ:YeRH2yaXYyXxz+YxEZARLuG6GU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bec258ae22664d5280d30b637d88c1d059f1dc8ec3472da3551960c138ee641_NeikiAnalytics

Files

1bec258ae22664d5280d30b637d88c1d059f1dc8ec3472da3551960c138ee641_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

GetCardReaderDriverInfo
GetTermInfo
InitTerm
RemoveTerm
SetupTerm

Sections

CODE
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 165B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

JCLDEBUG
Size: 238KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ