49f0eb333befbff6a725eb7f0e27cf80_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49f0eb333befbff6a725eb7f0e27cf80_NeikiAnalytics.exe
Size

6KB
MD5

49f0eb333befbff6a725eb7f0e27cf80
SHA1

133abbc3f26029389d0fd34f007e961176563bd5
SHA256

868530b756d5426d4e71ecfe2d99873c6971e5cdcf8ea7b831af34ca4365f108
SHA512

5cebcf22b2599804453840846197f017df43405c3a1de95bb511c98002e3361904df635f56ab8e840596222cdacc3541ad525163aa83c3f7fc9590730a8df50c
SSDEEP

96:BzrOcxUBDHZmagkexD8C6h1+PV3UdPubuYulzzU/MhjxF:gcxUXmMeC+idWSNlGMhjxF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49f0eb333befbff6a725eb7f0e27cf80_NeikiAnalytics.exe

Files

49f0eb333befbff6a725eb7f0e27cf80_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ