490e736c1ee4f93893401d72d8721a86d4e9641f57428b4db5b55ab2b5bff636_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

490e736c1ee4f93893401d72d8721a86d4e9641f57428b4db5b55ab2b5bff636_NeikiAnalytics
Size

13KB
MD5

2d07423686beadf8a347c470f68d75f0
SHA1

0ccbaff31dd6964d79c3bac73a6c3dde43df00a9
SHA256

490e736c1ee4f93893401d72d8721a86d4e9641f57428b4db5b55ab2b5bff636
SHA512

da503e861e0900ff0984cea5f339f3d4040ca87db85b0ac36ece2527a8dc079ae9f8207f1b5aaae3e9ebf627daea2ad7da1ed6b3558798ba9bc8f9509fa9c85d
SSDEEP

96:SCipBhgmKSeKmMngmGZGMM0hm/1zJJAVmBWieQPVGEn5YCOCrtMwrIIPCh7GmeOp:SXYKlAMdnJAgBXxyh7bqq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
490e736c1ee4f93893401d72d8721a86d4e9641f57428b4db5b55ab2b5bff636_NeikiAnalytics

Files

490e736c1ee4f93893401d72d8721a86d4e9641f57428b4db5b55ab2b5bff636_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Builds\923\Service Tools\RSD_REL_Temp\Sources\Src\VMS.Keystone.Services.AgentManagement.DownloadAgent\obj\Release\VMS.Keystone.Services.AgentManagement.DownloadAgent.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ