274f8df7f2d317a6714321923c436680_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

274f8df7f2d317a6714321923c436680_NeikiAnalytics.exe
Size

85KB
MD5

274f8df7f2d317a6714321923c436680
SHA1

532b74ddad74d728378f3cdc95463fb7312e8e2b
SHA256

56ec1c518219bac75d3ab4699967f8d7b9a85a505f5846f6657827f05795de80
SHA512

75955ff457cc712d52ae3350168af4cc30616b24c38f2236391dc44d86b8561ee06c6fc73791ddc09fb86fe67f0f3e142f9650bbcbc97e21e1289111b85016f5
SSDEEP

1536:FZzsQlk2i3Cn/0BEqNBl4yV7nD0BPEBAbVq9lMmAdi8tzoDEXmktCBAndM3:HE2iW/0BEqNBlnRnD0BPVVq9eJtzGOZi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
274f8df7f2d317a6714321923c436680_NeikiAnalytics.exe

Files

274f8df7f2d317a6714321923c436680_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Rehm.ViCon.DataAccess.Contracts.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ