e109ceed2c5c1115722c278660916be0_NeikiAnalytics | Triage

Sharing

General

Target

e109ceed2c5c1115722c278660916be0_NeikiAnalytics
Size

1.3MB
MD5

e109ceed2c5c1115722c278660916be0
SHA1

a43b5e8aea20ea268161d0b0f7d2b3f91be0b1bf
SHA256

c9d8145525d7fd37680d84559044381652b227bd25a4f142bd2964fc16c9a1cc
SHA512

b8cd81e3c848aaa9b34e6c6027a4292633c1bdbe248781fa53586ff433a38fc2b7c8f2d9bf93137a39806db38571887c6f7078c61be3b0db3689a64253f4c8d8
SSDEEP

12288:arnIFUjD5aZTrjEUXDIaTrj2ky0sLvFZq3xSRe7BHvikYoyUGbKOxEXYGaYRD+bQ:QIRD2kgZqhae16CGbfxEXYGaKqM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e109ceed2c5c1115722c278660916be0_NeikiAnalytics

Files

e109ceed2c5c1115722c278660916be0_NeikiAnalytics
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\dbs\el\oc\target\x86\ship\postc2r\x-none\setlang.pdb

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 300B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ