1cbdebf2617d8386f525c70e4f6cb4a0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cbdebf2617d8386f525c70e4f6cb4a0_NeikiAnalytics.exe
Size

13KB
MD5

1cbdebf2617d8386f525c70e4f6cb4a0
SHA1

6cf3346db8b2d160d374f818d1f1093ed1a3b9d1
SHA256

08b1efe3e9f1c04220c05aa9d13136fd53fdc814683c8e8356c7081e9caa3ce9
SHA512

b89d9fe464934da7aed52569149ff3d86922f1b92a90712e2e85f60119cfe12826cc650810d3f053343f89bdb642075b546451bb618e620b8f931cfaf0811a1e
SSDEEP

192:8gQNWFYCODVCO3UfFMwcOz+MMfd1+DkeSanAbpgkg08B7MFbU8b:8gQEqCODVCOkfqwEd1+DkeSaAbpAHa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cbdebf2617d8386f525c70e4f6cb4a0_NeikiAnalytics.exe

Files

1cbdebf2617d8386f525c70e4f6cb4a0_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\8c7720f4\1c505455\App_Web_3zehsaqs.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ