20ad525300bbd0f71035bd04a5a5b660_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20ad525300bbd0f71035bd04a5a5b660_NeikiAnalytics.exe
Size

12KB
MD5

20ad525300bbd0f71035bd04a5a5b660
SHA1

ed878a872aa97558fb771038b97ecfab7a957db9
SHA256

72905eefb35a40e764f89c488d68f1f4dd1e18750b2354b95a9b7c5cc93bd7da
SHA512

ea26355ed392872491c53e5e5d7caa82fff5ebc1e94086b08ed475b0c3984c45e0c4a7f3da602afe9a7c23a8782369d0b27d169288864d1633605eb61f58c7bd
SSDEEP

384:5L7li/2zJq2DcEQvdhcJKLTp/NK9xaOm:JpM/Q9cOm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20ad525300bbd0f71035bd04a5a5b660_NeikiAnalytics.exe

Files

20ad525300bbd0f71035bd04a5a5b660_NeikiAnalytics.exe
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ