a0766cbfe651b145052a7929d05f987b2ba7681ccf28ea7ad14a3ccd71d0e356_NeikiAnalytics[.]cab

General

Target

a0766cbfe651b145052a7929d05f987b2ba7681ccf28ea7ad14a3ccd71d0e356_NeikiAnalytics.cab
Size

20KB
MD5

d7aa89fcf63cfbb7ffcd84b0ef8c0fc0
SHA1

8e573bfe227adae9ad6ec296a2f016fb1c6f7973
SHA256

a0766cbfe651b145052a7929d05f987b2ba7681ccf28ea7ad14a3ccd71d0e356
SHA512

ff1c076bf57f0284bb8dd0883b57c70d7dbfca44ac06c8e3fd4881ef47a1f443b2e8f31544d883e5af505d82638025ffcef6e942699528ea9a1d332b8231c653
SSDEEP

384:Y9xt9h4pSVLC7zW1Ya9g/D3QTn1QGc1pPU56KYxY5EmZzLaHDlfOeT8NnVYdNtbS:Yd9h4pUCu1da8Tn1kPUgNY5jZaHDlHG1

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cnm8500.dll

a0766cbfe651b145052a7929d05f987b2ba7681ccf28ea7ad14a3ccd71d0e356_NeikiAnalytics.cab
.cab
cnm8500.dll
.dll windows:5 windows x86 arch:x86

72166d94eb7501b625b1f2b4b0a99399

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
atoi
_initterm
free
sprintf

kernel32

GlobalFree
GlobalAlloc
GetLocaleInfoA
GetLocalTime

winspool.drv

ClosePrinter
OpenPrinterW
GetPrinterDataW

Exports

Exports

CPD_AccessDrvDataBase
CPD_AccessLMDataBase
CPD_AccessMntDataBase
CPD_AccessPADataBase
CPD_AccessRootDataBase
CPD_AccessSMDataBase

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ