58c1a80a51948c6cb1492ded585c2800_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58c1a80a51948c6cb1492ded585c2800_NeikiAnalytics.exe
Size

7KB
MD5

58c1a80a51948c6cb1492ded585c2800
SHA1

4a9ea1fecf503a370cc4bf0b7dc4d6f2d396b0c6
SHA256

d1f9ff0414d4390f183dfe95ceae0448b5c31a91b0b05981eae8b2042a0b4888
SHA512

b48c32e4cc4a9f8d98be976b2f0f513f152e16e1d023694990ccd189843094683d5813789220fd16119e3d3eeb4a24fa6611aa61cef3a74c697439e56a35f10e
SSDEEP

192:c/1F4FOnYVlPlmRCGaHygJbvUs6oXfJuPx:GL4FOYXiCGCz6/Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58c1a80a51948c6cb1492ded585c2800_NeikiAnalytics.exe

Files

58c1a80a51948c6cb1492ded585c2800_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ