80483adf3ec31e2ca8aa3039fddf4d40_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

80483adf3ec31e2ca8aa3039fddf4d40_NeikiAnalytics.exe
Size

12KB
MD5

80483adf3ec31e2ca8aa3039fddf4d40
SHA1

9bfd52a0401312168a443fe4850f89af16ee1fa2
SHA256

167aa52bc7845e9dd506ee65c16b3d46167385d3aaaa9cd2b3c88ca6c1e2af7e
SHA512

21e1c27e9a1036ffe1b27832fd92b1d7844a22722e84815883b1676348f42403463f7a04b326e209e45710f1fe42689a2724b5ef9b4d7e20aabd2e5ab3688b95
SSDEEP

384:dL7li/2zPq2DcEQvdQcJKLTp/NK9xaHH:NTMCQ9cHH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
80483adf3ec31e2ca8aa3039fddf4d40_NeikiAnalytics.exe

Files

80483adf3ec31e2ca8aa3039fddf4d40_NeikiAnalytics.exe
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ