bf0ca780006f939dcd9b205917b8fce0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

bf0ca780006f939dcd9b205917b8fce0_NeikiAnalytics.exe
Size

12KB
MD5

bf0ca780006f939dcd9b205917b8fce0
SHA1

7099a3b9d23e907de7a91afbb9b91cfac0138c21
SHA256

ffdc645f6c72c0c2e4e76b29e3563fddf2f8ebb22a962ec5f796a56a013c5b5a
SHA512

a005ce0a6ae178d9088e0b3c5175ac89b2394f43d1387c207e1c8588cd99838bd274fea1a16495b710997c8b59273745dd318db6c8cea84dd7a6740b64e9a413
SSDEEP

384:0L7li/2ztq2DcEQvdQcJKLTp/NK9xa6c:itMCQ9c6c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf0ca780006f939dcd9b205917b8fce0_NeikiAnalytics.exe

Files

bf0ca780006f939dcd9b205917b8fce0_NeikiAnalytics.exe
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ