bcf8d38b08130afbbcf28f01ab8eb8f0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcf8d38b08130afbbcf28f01ab8eb8f0_NeikiAnalytics.exe
Size

12KB
MD5

bcf8d38b08130afbbcf28f01ab8eb8f0
SHA1

45ff50fcfdfe467e26b155f9135f114bb7b37c7c
SHA256

381f2db88be9c11010547874cafe7f0b4a2b14ae599affd64bfa0e3284d22e21
SHA512

1382e1281d93225645761f5c418fcb0c8d22ddeedb3f9d5633acb5941dfef3b19c73a348ea80f85817362b7ceffed0b03b21cb3fd81b0614c81268f06c8ef20c
SSDEEP

384:SL7li/2zQq2DcEQvdhcJKLTp/NK9xarT:MEM/Q9crT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcf8d38b08130afbbcf28f01ab8eb8f0_NeikiAnalytics.exe

Files

bcf8d38b08130afbbcf28f01ab8eb8f0_NeikiAnalytics.exe
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ