ccdacd81396ffe6e1142204243ef2460_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ccdacd81396ffe6e1142204243ef2460_NeikiAnalytics
Size

3.3MB
MD5

ccdacd81396ffe6e1142204243ef2460
SHA1

a5beda3ef4e38cf4313e55d1233cb483f3a5bfb1
SHA256

1334d9f6af893588425598b5ebea726269e62cee736467e6aced7db6bd518dea
SHA512

1fe5e1ff962bbb8f361bdf4322398b14a40bda283c5741a8187def5ea4a0dc90bb168131c82caf91b155a1b6aa66f2f37a2f1b74acbba4c9a3655a17fa1fad94
SSDEEP

49152:9IR88mUi6AjW/MUSdGRf3/tL9IW1dXg3S/MHmgghKPgssSt2gB:9IitjxAZtL9IW1dXg3S/MHmgghv7StX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ccdacd81396ffe6e1142204243ef2460_NeikiAnalytics

Files

ccdacd81396ffe6e1142204243ef2460_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

p:\Target\x86\ship\setuptools\x-none\Flattener.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ