6e69776e2be0675f183499a14554aaa0_NeikiAnalytics | Triage

Sharing

General

Target

6e69776e2be0675f183499a14554aaa0_NeikiAnalytics
Size

5.9MB
MD5

6e69776e2be0675f183499a14554aaa0
SHA1

44bcdd13919e284a5fb766ffdab5bebeab24788b
SHA256

ff700551ecb062a7e323fda36ad925c3d66916ee1ab5ad53887c56c827e4edc1
SHA512

be992719bab5da322941e429d8422462799d7aa81c7c43a29970f36359fdc9c3a4b29c50944c32c39ea609d151b48c0006be32a1dbfb7d7c4b6d70b8da0f70db
SSDEEP

98304:4ndOWXPGJ1OWeEaCYluAWwYiuFFcZPy8KD/ZPFhstzob40:4dJc3eFCwEqX0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e69776e2be0675f183499a14554aaa0_NeikiAnalytics

Files

6e69776e2be0675f183499a14554aaa0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\SW_\ConfigurationSoftware\Wago.IES\Wago.IES\obj\Debug\Wago.IES.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ