ded0f6292b98881a6e5fda21090556d0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ded0f6292b98881a6e5fda21090556d0_NeikiAnalytics
Size

3.9MB
MD5

ded0f6292b98881a6e5fda21090556d0
SHA1

88a519763144e9ae90584ea4c2322f1738ac0a5b
SHA256

bbceacb7f85585d279ce6e3821d503a692750d297ae097d12cda2ba474b0686c
SHA512

9fb43e45f583598dcb833289c7fe0005c0e38612597542e9372b3b7ec6e39b59ce87a288bf32980369e0a7cca6dbbaf1ab9d68f2a376929c3e5a560569a2fdf0
SSDEEP

49152:jA0vbK35DMnCIjtAy2S9uljBWSytLoqU3sNBk9/fw2BwfmM0ft+tIR8x:jAOp55kHstsF3sNi9XwgwfoliIix

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ded0f6292b98881a6e5fda21090556d0_NeikiAnalytics

Files

ded0f6292b98881a6e5fda21090556d0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

p:\Target\x86\ship\setuptools\x-none\Flattener.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ