29c29263b060c2175b27c32075e32d60_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29c29263b060c2175b27c32075e32d60_NeikiAnalytics.exe
Size

53KB
MD5

29c29263b060c2175b27c32075e32d60
SHA1

263c141332bbfacb908ebd6d5ef680eedb5c04fa
SHA256

b619658eb0521e199492d6343fe95d5ad0e2af3629a9de125fabda7270a01dd5
SHA512

880c446acd33a1d61a46c926fdd337478c1684aee01fff72c2af7bd2c0d048fd70a6123f8457f3952bc7f42b5a074ada8e227040c41fd627f71d9ff77c8ec044
SSDEEP

768:pcYc7xSB0WCZ35gG/jC94VfW/0KvO+iSRKsAcbmdgh7Zsy:ilYzZmjCeVfiPv8SRyQ7t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29c29263b060c2175b27c32075e32d60_NeikiAnalytics.exe

Files

29c29263b060c2175b27c32075e32d60_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\Dev\GT\Library\Bee\artifacts\1900b0aP.dag\Oculus.Spatializer.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ