99cb7df200176415d58278a820469fd0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

99cb7df200176415d58278a820469fd0_NeikiAnalytics.exe
Size

212KB
MD5

99cb7df200176415d58278a820469fd0
SHA1

dffd6a849b85017685886cdc873216e0c3b1a66f
SHA256

7bae2c76ffd4fc98f62e11b1ffdf327ee87c75851ae7f12bafc6f4f53ec2fb02
SHA512

d9917a6096a66cf562071c9bf30323a156b0d685fdf4cde7b033bc5f0e075dfddd0542ae1065fd6f35c722e4216b3a625d230d7170ca1a48e98055f860e7483b
SSDEEP

3072:h0pdsiKxpw8CHUuV2YFeN2K10+yI+iQRfQXSJMT+qsyGQUeiXUyWmrjYBIMEtmAk:PK+yI+AfdF1QFw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99cb7df200176415d58278a820469fd0_NeikiAnalytics.exe

Files

99cb7df200176415d58278a820469fd0_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\06da6aeb\95140f79\App_Web_65tbmlwk.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ