681f0bf470f272fac9a05662abb19860_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

681f0bf470f272fac9a05662abb19860_NeikiAnalytics.exe
Size

127KB
MD5

681f0bf470f272fac9a05662abb19860
SHA1

1b04fb7cf1e88a9d6a3b6d4c762a4c224bd016e1
SHA256

70a404c480011ff463f21bb0291dcc897f37be7ef572a6469a6496a37cc58bea
SHA512

0097deffcf665dcad2fea949db6080d15ed2eeb515f93b1922cf46667d7774ab3583ae9cd55c099a2a63ef778aad696cbad2146426c5c96e9f6d4a553c469b7b
SSDEEP

3072:P3Rdx2k2RfEFi9ZSo5EHpo3WKSb7cYQTTGrLRbewrZ:P3R7NKKb7Gwr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
681f0bf470f272fac9a05662abb19860_NeikiAnalytics.exe

Files

681f0bf470f272fac9a05662abb19860_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ