b28c9a76ff850a50c5ce020b7e99c3c0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b28c9a76ff850a50c5ce020b7e99c3c0_NeikiAnalytics.exe
Size

12KB
MD5

b28c9a76ff850a50c5ce020b7e99c3c0
SHA1

7a5bfc04252ceddeb5aea6159eff0c88811aec09
SHA256

129b9dd17e6b812af27617ff4dd8e0d4f84620cd94ae0a190c854c50b1bfdce8
SHA512

1fb919911cfdf2f95c2397a81f4ee0cc1c91fea68ca4afd028ca7a0b9ba2cc83a20ad7cd4430c599c8d191dee51f6ca2c175163984b7aa5d9a2825c33811934c
SSDEEP

384:9L7li/2zkq2DcEQvdhcJKLTp/NK9xaFU:tQM/Q9cFU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b28c9a76ff850a50c5ce020b7e99c3c0_NeikiAnalytics.exe

Files

b28c9a76ff850a50c5ce020b7e99c3c0_NeikiAnalytics.exe
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ