5083ddd5595e3e8f829a0b20c0acbdd0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5083ddd5595e3e8f829a0b20c0acbdd0_NeikiAnalytics
Size

45KB
MD5

5083ddd5595e3e8f829a0b20c0acbdd0
SHA1

34821405280665b45fc4b2e44a7a7130cd7bf450
SHA256

2e97501847346ef63186e9f973fed60eb70e8bb8d896b4f38e77fcde39bfdb33
SHA512

e8a998c31b40c19487e5c0acf15e13ff8655f02146311fdc12c88e8f92a07826443622dd8b91f4c852c6689cf9974cad3bc563540bf64d1ba8618ae1938035d4
SSDEEP

768:wwkfRi4/blEhSFjnKuZectWQYKQL2oLyCrr/STLf4NJjpS:ww6Ri4EhSpKuZectWQYKQi52/S/2xp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5083ddd5595e3e8f829a0b20c0acbdd0_NeikiAnalytics

Files

5083ddd5595e3e8f829a0b20c0acbdd0_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

AdminCmdAgent.ni.pdb
d:\build\Hidden\Source\PluginHost\Common\DeviceServiceLib\FirmwareService\CmdAgentLib\AdminCmdAgent\obj\x86\Release\AdminCmdAgent.pdb

Sections

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ