0f29304e50fdaef9fb43f66eb1a6af70_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f29304e50fdaef9fb43f66eb1a6af70_NeikiAnalytics
Size

2.5MB
MD5

0f29304e50fdaef9fb43f66eb1a6af70
SHA1

96e3c5ef733e5bfbc18b51487a39c9cfaca6ddb9
SHA256

c5ea71e320d9731d84e83454a74cd03093885a0a5b2e975d5a791fb96be2d181
SHA512

5455ac284b8ee3ab999ef26285b95fe332d2ae471c32e6cfaed4395ad85410e899689a60edf7b63d5f99f0cf8885b42ba2ba986286b8cf6fe5252d29d7735d48
SSDEEP

24576:CgXPQ15nreelN984kWR4tkeN9sV8hcyA1nfDb:AreWhSk89smAnL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f29304e50fdaef9fb43f66eb1a6af70_NeikiAnalytics

Files

0f29304e50fdaef9fb43f66eb1a6af70_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\VS_2017_Projects\NERC_CIP_ACCESS\NERC_CIP_ACCESS\obj\x86\Debug\NERC_CIP_ACCESS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ