a9de9692aca91f8a2b5810d750beb030_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9de9692aca91f8a2b5810d750beb030_NeikiAnalytics
Size

3.3MB
MD5

a9de9692aca91f8a2b5810d750beb030
SHA1

9288caa78265b6b5b4cc6f8485e475e012ff739b
SHA256

dfd13b10a94497eed460dedbbe75facc7f488b36a64df5b37404cce80001b933
SHA512

fb7e11b8806a15abf7977004cc4a122c3d2819eb1da69eee46af567e8b6374145645f7c19ff8b63fb51002688eb54ec3e2526b483fddb96fe1a540ed7a5cedbc
SSDEEP

49152:zrrNDS5lSRsNBk9/fw2BwfmM0fQZqhaK6zbfqdlIhKPgssSt2gsmUi6AjW/MUSdk:jNDS5lSRsNi9XwgwfoIx/hv7StLjxAZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9de9692aca91f8a2b5810d750beb030_NeikiAnalytics

Files

a9de9692aca91f8a2b5810d750beb030_NeikiAnalytics
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Office\Target\x86\ship\postc2r\x-none\namecontrolserver.pdb

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 300B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ