49aee256fea33027ed7c89e825fd58d0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49aee256fea33027ed7c89e825fd58d0_NeikiAnalytics.exe
Size

12KB
MD5

49aee256fea33027ed7c89e825fd58d0
SHA1

7244230be5bfb30c703b0ddcb93de717fec44bb1
SHA256

8634fc9ac0d3b80a18f2b1eabba92286559de892706c2061ff18030e4702be13
SHA512

51e2f6903eac62bef4c944b88a966c9600ca421ae9cf39acdbc48145693f15dd6ff7d4a15a0f2f198919ddf2fe632ce4d884cf0e3570c4018ae8f76f1769e5ca
SSDEEP

384:1L7li/2zXq2DcEQvdhcJKLTp/NK9xak7:VzM/Q9ck7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49aee256fea33027ed7c89e825fd58d0_NeikiAnalytics.exe

Files

49aee256fea33027ed7c89e825fd58d0_NeikiAnalytics.exe
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ