159a6317c550f2fcb90f02883e003b70_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

159a6317c550f2fcb90f02883e003b70_NeikiAnalytics.exe
Size

57KB
MD5

159a6317c550f2fcb90f02883e003b70
SHA1

f281fd6979269dc599651a64d5952ba609643a23
SHA256

bc8cda89d9a207099ed0217a25a6ee09decf34755167ddc0634bfc090fd40b63
SHA512

5fcf77e5204166ab68554462f851f351895d274caafd65ee7accb8882e1c2de56e1b720f899f13a3a7c4204f56e15a8ff711afaac73e2d12e13e448c8a0f6c94
SSDEEP

1536:mS0iGOIS31Zt1tYhsWUe12wNcJ/Nl72DP5NkWgBYM:mSVtISh0WqcJ/iTktBP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
159a6317c550f2fcb90f02883e003b70_NeikiAnalytics.exe

Files

159a6317c550f2fcb90f02883e003b70_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\GitRepos\7300-ethercat_esi_generator\dll\obj\Release\ESIGenerator.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ