6ef5bee8e7652cbb94bd3f6e23fa0f80_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ef5bee8e7652cbb94bd3f6e23fa0f80_NeikiAnalytics.exe
Size

12KB
MD5

6ef5bee8e7652cbb94bd3f6e23fa0f80
SHA1

22bb396821caae224c8744cf2655596170d769d7
SHA256

e5def85656bc2dedc2a55605e3eaa8e9a84e2b04ebdf95c3367599aee998c57a
SHA512

436820c6a1a378e9950102e14263f5c6a73da15ac046d762e176d8234406ad7d13c273865801ad89ce10bf5b1fd89257645f0dc20a36530d746c4c72add6d50f
SSDEEP

384:nL7li/2zeq2DcEQvd2cJKLTp/NK9xaDpX:LOM8Q9cFX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ef5bee8e7652cbb94bd3f6e23fa0f80_NeikiAnalytics.exe

Files

6ef5bee8e7652cbb94bd3f6e23fa0f80_NeikiAnalytics.exe
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ