8e204f68555761ec54bbfffbfff84a20_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e204f68555761ec54bbfffbfff84a20_NeikiAnalytics.exe
Size

108KB
MD5

8e204f68555761ec54bbfffbfff84a20
SHA1

69a7b64531b1008e86af983e9a5d3e960357b6ec
SHA256

2f45d0139369fdcd9febfb0c7cb3ed9aa862cea3c4161dbf5aa4247fc3287162
SHA512

38059a5b5ad1e4b008b0eb514855946d204249cce8d28a8f5448af4a9511e6c7761227e33791ee4767307bc6454c99c32e7677fae966f62cab3b737a4defe81a
SSDEEP

1536:GNHKOoQx9Dm5gQl/Yxdx2Hiv5km2B9c7A8z9gr6koI7m:GwOoQx9DUhY0Kk5Q7hpO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e204f68555761ec54bbfffbfff84a20_NeikiAnalytics.exe

Files

8e204f68555761ec54bbfffbfff84a20_NeikiAnalytics.exe
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\95126ce9\6d005bfa\App_Web_svwway03.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ