316bb6760155a0aa230db0c6ffaadfc0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

316bb6760155a0aa230db0c6ffaadfc0_NeikiAnalytics
Size

1.8MB
MD5

316bb6760155a0aa230db0c6ffaadfc0
SHA1

63b94cb12c6cefbf985277db1c961679d792d934
SHA256

42be466b805b227f50279b516d7d31217245a14b8232ec44f6c060d62afd5d4b
SHA512

ff6cb5980e3f6256098b74d9413d84536d296991dd1f16898dfa0767f0b0eb791d9eb653e3d584691e61eb9903f58fb47e84896251af9d707a890546c68d6d23
SSDEEP

24576:uIQRldw/r/WWjvGsQJv6K+hWfQITdD7tDVge0Zt8Cf+A7:R42rWWqs8LIWfX5DZDmNQCfz7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
316bb6760155a0aa230db0c6ffaadfc0_NeikiAnalytics

Files

316bb6760155a0aa230db0c6ffaadfc0_NeikiAnalytics
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Office\Target\x86\ship\postc2r\x-none\msosqm.pdb

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 220B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ