ddbd3f62bf8f4b00058f28d78b72f990_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddbd3f62bf8f4b00058f28d78b72f990_NeikiAnalytics
Size

2.4MB
MD5

ddbd3f62bf8f4b00058f28d78b72f990
SHA1

91ba0079d44d9adbf8815bd81a08a5853bfff22e
SHA256

1d0b996d7e0e083cf768712ab75b3bccb01a071ffc3db6aa354eadc0435c744b
SHA512

e04e8d08c0d60bb3a900ac4c4142109e7ea3b26150dc262430534808f55cd6f6f8df0a295d63ac854223a98793366ff2dd9b0b80cd0e9a6fb6c22625c5369198
SSDEEP

49152:zrDmDUv3nITeqrsNBk9/fw2BwfmM0f//IabjKoh9WsY:fDkpeqrsNi9XwgwfoPIabjKoh9WsY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddbd3f62bf8f4b00058f28d78b72f990_NeikiAnalytics

Files

ddbd3f62bf8f4b00058f28d78b72f990_NeikiAnalytics
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Office\Target\x86\ship\postc2r\x-none\setlang.pdb

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 300B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ