ceeeffe410d1ab143ae3a39bb9542880_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ceeeffe410d1ab143ae3a39bb9542880_NeikiAnalytics.exe
Size

17KB
MD5

ceeeffe410d1ab143ae3a39bb9542880
SHA1

702673b27da2b8a9c86eba205ffe8309a0a7d05c
SHA256

e4df56a6508f08ad0cc304701e89990084326bbcb5a34018de91e8369378c339
SHA512

4d0bd4725e7fa2b669e96e0abde0674c0818c32a59fc5086573bf44f963036f1eab0de96cec7782f2da76ee901d254c23b87f5966021bbfc7dbc6877e965a669
SSDEEP

384:/VV2sg+jYLRrjc87tZK3l5mcgOX/ycgvK8cMJj:9V5gCoRfdtZKfouqcgyOj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ceeeffe410d1ab143ae3a39bb9542880_NeikiAnalytics.exe

Files

ceeeffe410d1ab143ae3a39bb9542880_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Source_C#\dumper_dll_class_3\obj\Release\dumper_dll_class.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ