579a9c44f43b39df2940de3d44f321c0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

579a9c44f43b39df2940de3d44f321c0_NeikiAnalytics.exe
Size

12KB
MD5

579a9c44f43b39df2940de3d44f321c0
SHA1

2cf497a642734397a35f870112dc3803f8d13898
SHA256

fbd9629403953365978d9d513157a49da02b560dfb181ef6c2350f7fee1dc0b6
SHA512

d448123642320e2080b7f80ad53ae0308e61ee26de8f6a0161d6d3958b8e7a156a6e2637285845bbec3a2611b9520f18103e4aaf53b169f7928f07746f12b540
SSDEEP

384:iL7li/2zvq2DcEQvdQcJKLTp/NK9xaPS:8bMCQ9cPS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
579a9c44f43b39df2940de3d44f321c0_NeikiAnalytics.exe

Files

579a9c44f43b39df2940de3d44f321c0_NeikiAnalytics.exe
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ