b355be0dcfa5f42224c949b30072c660_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b355be0dcfa5f42224c949b30072c660_NeikiAnalytics
Size

324KB
MD5

b355be0dcfa5f42224c949b30072c660
SHA1

989b28a1b4e1a10c71dc53bc7e6e4b475c9fc255
SHA256

ec3d36cac18a869db543f541f624c4638732f3194a95683f84381f4ffefddddf
SHA512

63ecc619f33d9dc66fdf24d07909b4253b17993e853fb8b89e3c1bd888c743c84d6b809ffbd13db3a1c09825794d278858380e0073246e1dd66296d351bbc0ee
SSDEEP

3072:hDxVHE0oP9h8ly5Tng5+PjyaBcJvXxB2L0dlgmTMfm3uITeZ+E60MUwVbNgisW8T:hDRoTgy+5+PjkxB2L0d6+o1621W8T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b355be0dcfa5f42224c949b30072c660_NeikiAnalytics

Files

b355be0dcfa5f42224c949b30072c660_NeikiAnalytics
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Office\Target\x86\ship\postc2r\x-none\wordconv.pdb

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 260B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ