437c6493add71b23af583cf1b149e400_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

437c6493add71b23af583cf1b149e400_NeikiAnalytics
Size

2.2MB
MD5

437c6493add71b23af583cf1b149e400
SHA1

9b9c2af75c62aa4b00da3cc14a8f0f4acbb9b0e0
SHA256

395a0d2e7589ad0d011fe49c3101da705ab53ccb5c6cfe67b62309d2fbc153a1
SHA512

b90c3352f42bd50af21b692bf1ac24002b4ba37158b0be9613756d272ed2722120b8b3bdbc39d0d989630531fbd8e353851a3686d4a716b3ca34c106d8cd7a3d
SSDEEP

49152:MmDta4IoJdXN0BMOwLloBrugFsNBk9/fw2BwfmM0f/IgekI:MC3JdXN0B7+s7sNi9XwgwfoRekI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
437c6493add71b23af583cf1b149e400_NeikiAnalytics

Files

437c6493add71b23af583cf1b149e400_NeikiAnalytics
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Office\Target\x86\ship\postc2r\x-none\selfcert.pdb

Sections

.text
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 340B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ