1f6ea3ea7dc7bdd92269ca9dbd6efbb0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f6ea3ea7dc7bdd92269ca9dbd6efbb0_NeikiAnalytics.exe
Size

12KB
MD5

1f6ea3ea7dc7bdd92269ca9dbd6efbb0
SHA1

301a5815a7a1872a24e15dfa496c2cb20c5fadb6
SHA256

f52255767ad6c12d4dbc63c9304193bb7d05d0a45f5e9f3587667d48cc180404
SHA512

b9248dd2f2f59af90b90c1e75b2cec40f0fedd1335ce579736c08931b3bba48a4d10f0a9675f8f142fbd01c7d2398abd6b878fe45afe7dfec80746afa2544eec
SSDEEP

384:eL7li/2z9q2DcEQvdhcJKLTp/NK9xaNfu:IFM/Q9ctu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f6ea3ea7dc7bdd92269ca9dbd6efbb0_NeikiAnalytics.exe

Files

1f6ea3ea7dc7bdd92269ca9dbd6efbb0_NeikiAnalytics.exe
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ