31b71be4ba29f6354ac73ff68178d480_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31b71be4ba29f6354ac73ff68178d480_NeikiAnalytics
Size

510KB
MD5

31b71be4ba29f6354ac73ff68178d480
SHA1

419c6f6bf4484b499e1c7bc3ce541ad36e04a505
SHA256

c6a91c74466467d3d4825811e922f73440ac83fb92ba5cad0ae6ac31ff2cbc41
SHA512

93066ab816adf296d79908ee2089430f82bb236eca8dd2184270fa80bb3370e3413a65ea2de549a647b9f699922800d21db54f8708e971a042e840c629a175b8
SSDEEP

6144:Dgc24p6qoSzd3oJiRJBbNFHFHnIYbamY1kk3RK3wMBm:Dgc24cqfT9bRIsams53YO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31b71be4ba29f6354ac73ff68178d480_NeikiAnalytics

Files

31b71be4ba29f6354ac73ff68178d480_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

PDB Paths

C:\wamp\dotdo\deli\allfiles\2\scrolled.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 508KB - Virtual size: 507KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ