cf0271c49cda8587d119bf99481ffa00_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf0271c49cda8587d119bf99481ffa00_NeikiAnalytics
Size

11KB
MD5

cf0271c49cda8587d119bf99481ffa00
SHA1

d4e2863938b3013abc213eed17c55245931b6006
SHA256

9b67d2a6f7db748f1d324367a69a2ac7570831cd05aced3c998a491bd0e178b2
SHA512

e4961c60756582436cb341176b4821b4bf49a52fd65b09bc1a729fef22bda197b2e8c3ee93fe75f8a8a3e3f9010cff829e59e687d30ca846e29eb943b7cb17ac
SSDEEP

192:aUkZuVz9CU8MBlkHOha2K1huHbggSzSas74AeF5XhMkbU8b:aUguthS2KLu7gdzSas74Bz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf0271c49cda8587d119bf99481ffa00_NeikiAnalytics

Files

cf0271c49cda8587d119bf99481ffa00_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\8c7720f4\1c505455\App_Web_bgoi0t25.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ