3e24f428f8dc045eb4d116410b36cbc0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e24f428f8dc045eb4d116410b36cbc0_NeikiAnalytics
Size

304KB
MD5

3e24f428f8dc045eb4d116410b36cbc0
SHA1

d56bbccbaf64e62f05804700a86f4e121f865f8a
SHA256

68dc662462ea49175edfe9acd2f238e16b6233d02793ce031e4b199f3b0166dc
SHA512

c60ebba4b0df8919e61e5b3b4446c8a68db24361ada46d31c5e3425e3c4a8c172e57d940fd12e191c5ce48e5c869087514ea4aa9048b6142531ba857c18dda2b
SSDEEP

6144:JzQNfk5l8zX1Xz0C55rdxduGFu1Q/1tUbiR0VO55rdxdu02:JzQNfk5l8p03V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e24f428f8dc045eb4d116410b36cbc0_NeikiAnalytics

Files

3e24f428f8dc045eb4d116410b36cbc0_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\850b8287\ae2d3fe9\App_Web_ljxau413.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 198KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ