0b99ef2ed6376592993b6cbfd32b38f0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b99ef2ed6376592993b6cbfd32b38f0_NeikiAnalytics.exe
Size

13KB
MD5

0b99ef2ed6376592993b6cbfd32b38f0
SHA1

45af3e58ffa6baa256ab0d3ee4dab0fc5cda3e7d
SHA256

e390807b4bd0376acbb1519cf5ab253d7bb158388af804725d579c4eebaf5c94
SHA512

811c99de21750d58e1da7b3de28405fd7e47c54532757522366f9df580fccec60b3907c06b4320a2b9dcdb0dbf780607f98ed6407188aa9e6ecedf70fb695676
SSDEEP

384:wKkCkcVxF77bkzvkogsz+kssxKTmxOtKXtTwTPLt:VXkYoNykNoKxOtKtMX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b99ef2ed6376592993b6cbfd32b38f0_NeikiAnalytics.exe

Files

0b99ef2ed6376592993b6cbfd32b38f0_NeikiAnalytics.exe
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ