f0dd5f5124b4fa9e82b9cab5044d6850_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0dd5f5124b4fa9e82b9cab5044d6850_NeikiAnalytics.exe
Size

12KB
MD5

f0dd5f5124b4fa9e82b9cab5044d6850
SHA1

b71ba58ba7f87929fecb631e65aa6a8481af5f95
SHA256

d77fb89986bab4de3c71a47efe14019adec1d9444242649358f2153e3fd25822
SHA512

691cb83086276698a80ce784cb9674ad63ab8a1ff18d544b9511938e1c61fa434bc2fa463ae7fc7ae59b36c7a6c45ff506c9403b2de0f2076283fc1ce126a4c8
SSDEEP

384:HL7li/2z8q2DcEQvdQcJKLTp/NK9xajRp:rYMCQ9cjRp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0dd5f5124b4fa9e82b9cab5044d6850_NeikiAnalytics.exe

Files

f0dd5f5124b4fa9e82b9cab5044d6850_NeikiAnalytics.exe
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ