aacd031d72617ca7c8aa7d6e64800070_NeikiAnalytics | Triage

Sharing

General

Target

aacd031d72617ca7c8aa7d6e64800070_NeikiAnalytics
Size

3.5MB
MD5

aacd031d72617ca7c8aa7d6e64800070
SHA1

98f8ffdd106ee7886d11694576406a89edb9da6b
SHA256

3795415ff4e68158a25c172f9d431024592f2593e1bd5601f0c76157b79ed95a
SHA512

9707548a09da610fd1da42e4b8ab519227c18dfc88bcb11678f95229263f7ab5884f5d32617c6e16eae3048213d9b9497d4e91d57b3443d65157a6c4f9275334
SSDEEP

49152:MmDta4zmUi6AjW/MUSdGRf3/aoJdXN0BMOwLloBrug/v9MtBMO+YrovpU/9a/4Md:MCcjxAZBJdXN0B7+sd9vOg8IDQy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aacd031d72617ca7c8aa7d6e64800070_NeikiAnalytics

Files

aacd031d72617ca7c8aa7d6e64800070_NeikiAnalytics
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Office\Target\x86\ship\postc2r\x-none\selfcert.pdb

Sections

.text
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 340B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ