4251f9769cdd163087e1fbf24f2d68c0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

4251f9769cdd163087e1fbf24f2d68c0_NeikiAnalytics.exe
Size

807KB
MD5

4251f9769cdd163087e1fbf24f2d68c0
SHA1

eca4fa0d2816ebec11b65ad145ce0391044c3390
SHA256

e68e1a174e2ebdfacc55a50a5b22fce96d848a33fbeddc9b51ea35212cafa859
SHA512

410d2bddde3968f30c73070da913b0f799d149190c1f2d45427320a704cce75bbe3eb49ead34fb4d78c316984cdd8e49c91a6d347ef17c45c03d6aea8d709d8c
SSDEEP

12288:zVHzj/pEpHEXI13JCNTW3JZDbid1rLTsYX6DUfaJwc8BsvWwjH0ZcV:zpn/pEOI15CNoJQLTdX6DATujUZc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4251f9769cdd163087e1fbf24f2d68c0_NeikiAnalytics.exe

Files

4251f9769cdd163087e1fbf24f2d68c0_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

MSBuild.ni.pdb
f:\binaries\Intermediate\ndp_msbuild\xmakecommandline.csproj_1613737345\objr\x86\MSBuild.pdb

Sections

.data
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 608KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ