b1acd33ee8a3fc9d667df613a3061170_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1acd33ee8a3fc9d667df613a3061170_NeikiAnalytics.exe
Size

3.0MB
MD5

b1acd33ee8a3fc9d667df613a3061170
SHA1

0cb52f7077dff85d05a837fb81116e3ed4fc2a88
SHA256

0770d95c415faa578f40b1d67a0bf5e924614d3c842721c3468c2100a4dcfe11
SHA512

6a404ad8248dca85db91cb178b3d739520e7c904551612112ee3e1d204dcb48381a9a7cea98366486b2025ac967b06d41df82cc81af250da5011b40c6ea6c083
SSDEEP

98304:8ZLV2VFowc9IW1dXgfC/MHmgLIabjKoh9W:8ZLV2VFo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1acd33ee8a3fc9d667df613a3061170_NeikiAnalytics.exe

Files

b1acd33ee8a3fc9d667df613a3061170_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

dfsvc.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ