3703d432aebcc8cb07c5ff0dfc4d1220_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

3703d432aebcc8cb07c5ff0dfc4d1220_NeikiAnalytics.exe
Size

12KB
MD5

3703d432aebcc8cb07c5ff0dfc4d1220
SHA1

e2531145953dbcf4788d3b510f20c18670a0ce9b
SHA256

0dc402539ab6c3b6af00268cd435bf6d1a8a4e9035289faaebbe25dc17c7e45e
SHA512

b3379baab3c2d322311f09e6c7a87b18d245fe6dc3cd5ce7ef433de6f0cd733ac81447ea18a95a77e1039370aa91d78da9ec2da8bac5c4a39cac59dc78333384
SSDEEP

384:QL7li/2zXq2DcEQvdQcJKLTp/NK9xaS9O:OjMCQ9c0O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3703d432aebcc8cb07c5ff0dfc4d1220_NeikiAnalytics.exe

Files

3703d432aebcc8cb07c5ff0dfc4d1220_NeikiAnalytics.exe
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ