9a9c6560ff84376bfbe48bfef5068050_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a9c6560ff84376bfbe48bfef5068050_NeikiAnalytics
Size

99KB
MD5

9a9c6560ff84376bfbe48bfef5068050
SHA1

87615c7633c199ecc395ccecea2ea2da09ca2a97
SHA256

89218e251602c964da696169bdc007896e87e639397604c469c02f5feefe158e
SHA512

3bfb5f91ab528c24ef5aaf4cad2afab53fbffd798a4df2b215fbe6dbe65409632b148d18c91c450bed9c0c96f93d28c45f38b7592934fef412ec2bc0dcefc9f7
SSDEEP

3072:/xMa9r2KuP1FXSJMT+mzMfU4Fm1MyWmriFD:ZMirjk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a9c6560ff84376bfbe48bfef5068050_NeikiAnalytics

Files

9a9c6560ff84376bfbe48bfef5068050_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\df10478a\6e5c3622\App_Web_xsjkkrrn.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ