bbff9cad3208fc19cce596faad107d40_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbff9cad3208fc19cce596faad107d40_NeikiAnalytics
Size

2.3MB
MD5

bbff9cad3208fc19cce596faad107d40
SHA1

97644957ee15ecdd0695f6c25912abe4228ec556
SHA256

a22ef1666ede68fb6e0facad8147a0355767c947300fb4b3d9deb2ec58d06ef5
SHA512

24fa5c09e6d3c90ad2543b4039a2f27e5dfc97bb85502ff086c72ed90dcaad9ae69368878be4243f0faf74532e7ba2e12ef4bb245f5b464a9dd44e34cdaf08e8
SSDEEP

49152:ImUi6AjW/MUSdGRf3/aoJdXN0BMOwLloBrugQWSytLdu:BjxAZBJdXN0B7+sWstJu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbff9cad3208fc19cce596faad107d40_NeikiAnalytics

Files

bbff9cad3208fc19cce596faad107d40_NeikiAnalytics
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Office\Target\x86\ship\postc2r\x-none\protocolhandler.pdb

Sections

.text
Size: 317KB - Virtual size: 316KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 90KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 360B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ