02df2c957e9ef83e8cb4e8b2cf841200_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02df2c957e9ef83e8cb4e8b2cf841200_NeikiAnalytics.exe
Size

124KB
MD5

02df2c957e9ef83e8cb4e8b2cf841200
SHA1

3ca0e239617d02ce94a166a7c2f0ed050d1412c7
SHA256

0c7bcbb3a7a890b82bebb4c8a1cef8f02c3da4cfb278e2322dcf2468aae6ad1c
SHA512

b926cfd25f96f8557f3b968988586aeda321a559bb56c358c66becd6af797bd13278c9652fd760f469bf143ef8552583b35173f3e2ce3b04a1770fcf733126ac
SSDEEP

3072:FnF79DgsOs4w+UFCK6qYZFKc2aoPcz+Jl:/79DgsOs49Wz3qK/aoPW+J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02df2c957e9ef83e8cb4e8b2cf841200_NeikiAnalytics.exe

Files

02df2c957e9ef83e8cb4e8b2cf841200_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

.\Library\Bee\artifacts\1900b0aP.dag\Unity.Timeline.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ