0dd94ea70406e4654e65fac6dff8bb60_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

0dd94ea70406e4654e65fac6dff8bb60_NeikiAnalytics.exe
Size

139KB
MD5

0dd94ea70406e4654e65fac6dff8bb60
SHA1

b4e4bf79e4e50e7f279450601c15dd44b6f3b1a5
SHA256

6d2e04d3a65005cc753b7c09a0e1ae721a413a29be2ac8504f7d3e1f92856426
SHA512

7aa37b2fe611e484cd26f85d5e86c1e18a55ea0ec1bfb2081e2814f9b6462995482e85781c5cd8fd27889905c8086c89a9e2b61b34e5cc15568b9c9c1e31d765
SSDEEP

1536:QS2J8dZUuwdmyIOgrnTEzIRqupC+/urKCgshaFzz3XY3GZ+cIDgpCs6cdANHHVK7:gvuwdXBgrnwznupO/0mnG8qX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dd94ea70406e4654e65fac6dff8bb60_NeikiAnalytics.exe

Files

0dd94ea70406e4654e65fac6dff8bb60_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Rehm.ViCon.Client.SemicoViews.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ