c18379cffc1727cc5ecf8f3ec4a586d0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c18379cffc1727cc5ecf8f3ec4a586d0_NeikiAnalytics
Size

2.4MB
MD5

c18379cffc1727cc5ecf8f3ec4a586d0
SHA1

482f4d1becc3fc3efef73b3c23c794d29e1c871a
SHA256

b124f15b30aac7356a96a5ddf51bdd11d2f2d442104cf461066f4c1ae4041041
SHA512

e2ba94910c3395ab0cb4c91725f8f5bb70f7e0817fee255bc476d103013d3c1372e5360b088042d1f7839a2f2186a7429db3245d68e0f27ed04db0f30051bec0
SSDEEP

49152:/KxyhzaQ+SpPRC8xDhVxNJU0N0rKOWN8O3b0/3GhiwUkWlfBP:Soa25Cc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c18379cffc1727cc5ecf8f3ec4a586d0_NeikiAnalytics

Files

c18379cffc1727cc5ecf8f3ec4a586d0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.%RWZ
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.(0:]
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.]goX
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ