12bd642a2a7d01d7e0d8e2ab807ead10_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12bd642a2a7d01d7e0d8e2ab807ead10_NeikiAnalytics
Size

647KB
MD5

12bd642a2a7d01d7e0d8e2ab807ead10
SHA1

e29642a8efb53862f0a42d729c9fc284728a8787
SHA256

94e954e5026064525b042273a66d1e5cb6a06c8896f67bd1be25c49a8ff23448
SHA512

89fd3d958a1b17b53470ab270b581971d147e7eaf661556d1e1be794a2c3f90005df331f144d03677b30994229720ee8761800626ec7d6cafa5d82363ef30a56
SSDEEP

12288:DoVHWEVyD+c2lF3yHROwhoOLtsuY67nXqK:D0HQ92lF3yxOwhoOLtsuYQ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12bd642a2a7d01d7e0d8e2ab807ead10_NeikiAnalytics

Files

12bd642a2a7d01d7e0d8e2ab807ead10_NeikiAnalytics
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\dbs\el\dec\Target\x86\ship\postc2rcross\x-none\msohtmed.pdb

Sections

.text
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 300B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ