6adf0de2f48f625a866c8dfff3373bf0_NeikiAnalytics | Triage

Sharing

General

Target

6adf0de2f48f625a866c8dfff3373bf0_NeikiAnalytics
Size

376KB
MD5

6adf0de2f48f625a866c8dfff3373bf0
SHA1

af2bea6e8121be07a3412dec0303cc8fce229d9c
SHA256

647281d0cf70b0d6d788a0e884e616dab1f943db0da235be3cfeae2fa7be9f68
SHA512

a4d5bc9182db50e478360606a0fb72df4be83d2eb3a5ddc59f836a4e2afffd12180a921e5124c2126423287365840ebaac3715ecb1c8b3e89e98805dc290cea7
SSDEEP

6144:4JuRCSr/bVAPKrj9qhXe89PymQ9YCKT0rGLEqGwrDssxYIG/54+Kjgn3647g7iyx:4+FD4Krj9qhXe8hDQ9YCKT0rGLEqGwrk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6adf0de2f48f625a866c8dfff3373bf0_NeikiAnalytics

Files

6adf0de2f48f625a866c8dfff3373bf0_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Rehm.ViCon.Services.Wcf.ClientService.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 373KB - Virtual size: 373KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ