4e6825333814c5d46cf0f41e2e693830_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e6825333814c5d46cf0f41e2e693830_NeikiAnalytics
Size

228KB
MD5

4e6825333814c5d46cf0f41e2e693830
SHA1

e8075d876cf3af36d3c4f3731b98763c4d471ba5
SHA256

0f7cb58bf5bdb7cd8cce6adbb7c51f2bfcd925a67c269cbe14f04fb74bad9ca7
SHA512

91de96c233f4d55f38e10fcec67491cd6f71a3388426a99cfa13a403325404033fca4fefe311c8601deab83120fbaeac4fcba7d230292cd1f75221184e1c86d9
SSDEEP

1536:6gPUvWcv4uExTcZ1TidfQReO73Kmzs9miFm0xsrW9EqTzQdTbIhRyEoUKNJ/ldOz:7rrxTcZ1GxQ8O73KmzbiFmI39R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e6825333814c5d46cf0f41e2e693830_NeikiAnalytics

Files

4e6825333814c5d46cf0f41e2e693830_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Rehm.ViCon.Client.Pages.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 225KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ