bc91753ed442916cf22db05e6c447010_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc91753ed442916cf22db05e6c447010_NeikiAnalytics
Size

3.3MB
MD5

bc91753ed442916cf22db05e6c447010
SHA1

ad7403cdab0d2529efad85295a07cbf43a858553
SHA256

72d33a13ee6cf23846025c6b9870e7db60751e81f7083c2094ed4211db1a6993
SHA512

c14a764d6968a30b4f89aa783ad3281b205d59c26adb176b408ea11327b77973cfe79576b042b5d4ceb6e161d5bc104ade0a5d67efdd40faba04a7239789e6bb
SSDEEP

49152:z92SCWlIssZLi5lKr+ooJdXN0BMOwLloBrugxlj135DMnCIjtAybcY/l:zeGUgJdXN0B7+sm55qK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc91753ed442916cf22db05e6c447010_NeikiAnalytics

Files

bc91753ed442916cf22db05e6c447010_NeikiAnalytics
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Office\Target\x86\ship\postc2r\x-none\wordconv.pdb

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 260B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ