655424184738c387fa44da4adf19f6d0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

655424184738c387fa44da4adf19f6d0_NeikiAnalytics
Size

180KB
MD5

655424184738c387fa44da4adf19f6d0
SHA1

4b0a1e59600964cf5fb5bfd0e50b2f46ffa3dcb8
SHA256

acf7af04650120a8c8bdb614d2c483c0a8e4c73d61d4e39f443d2ca6808d9fec
SHA512

6905913e0ae2567d077329c2d4f54da254be5f01f8df27687dbd32a8c2ff579533b3a7b699607485ea54b509dade3be16aa4fe4a29efe75cef7dddec1df2b6d1
SSDEEP

3072:JywHWfGHpH25+ps8Rhf+ArWbh42qC+cEXS/AqZmXfGTXSJMT+dsyGQUeiXUyWmrY:Jy3ZdTmsa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
655424184738c387fa44da4adf19f6d0_NeikiAnalytics

Files

655424184738c387fa44da4adf19f6d0_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\97109801\6daf76a3\App_Web_jnljifk5.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ