130b0e99ec3100b581b8012e3c475c40_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

130b0e99ec3100b581b8012e3c475c40_NeikiAnalytics.exe
Size

1.4MB
MD5

130b0e99ec3100b581b8012e3c475c40
SHA1

0dd279f6b9ad109819a56276591639e73cf63ed3
SHA256

e5cb9a6c296f596a1c5db508edb11f51aa32f5c719cda4758d4061112f3def32
SHA512

7dc7d46a5c2857a2350ad4ed97704011bf854261d453f961c1b0650bdb37f8fee462f09046b23aa9ea539e292c997e2ac955bddde1de1ec9e072f41454edbf14
SSDEEP

24576:MyvEDk3mdZeTu+V5rYngsOWK/mmj3jbTr7QFwFyX1eSt+a/1qcB3+y2wCX:MiEDk3mdZeTu+V5rYngsOWK/mmj3jbTL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
130b0e99ec3100b581b8012e3c475c40_NeikiAnalytics.exe

Files

130b0e99ec3100b581b8012e3c475c40_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

hL:XxX
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ