63f0fef0de870f164db55ca8b7aced40_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63f0fef0de870f164db55ca8b7aced40_NeikiAnalytics
Size

1.7MB
MD5

63f0fef0de870f164db55ca8b7aced40
SHA1

9116f794d97fdb91fe054a28d610752d80704169
SHA256

91fe8805d3f4dac5d7b7df19562c338b3ca9703e8f9e1631c7b3935cc72c4085
SHA512

01d77129433d582ad2c3241ecf8e2de9528a222aae9c94f84aa892e9259810ff1927ba368e26621469f9e5162126ec81ee1259f8863b6a6d04630066ebb74953
SSDEEP

49152:/P9zWmTAbutmkO+wAOInO4XrztygxLHkJE4VB:/PHs+wE9XD8VB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63f0fef0de870f164db55ca8b7aced40_NeikiAnalytics

Files

63f0fef0de870f164db55ca8b7aced40_NeikiAnalytics
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\dbs\el\oc\target\x86\ship\postc2rcross\x-none\msohtmed.pdb

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 300B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ