236803482cfb584232cec675bd4ae440_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

236803482cfb584232cec675bd4ae440_NeikiAnalytics.exe
Size

148KB
MD5

236803482cfb584232cec675bd4ae440
SHA1

8a52db8a7f2696f38cb2466b4af48946e58afb67
SHA256

fcaa7d10a6e03f295bd09aa298701a4a0c1e37784579b57fc09ba9c30bce1719
SHA512

60fd6488e91ae3eae5ecc1105d0d5095fb506663c86a2624b45f4a54438bb43eb403cd24ce3c2d8dc7a317b1de5aa09491f8dc6acf5dbe53ad811b14c9cf4c5d
SSDEEP

1536:doJg8pTWiSMX0aY7eeFU3g7eCUCFvBw3qHimQkCOCyTtzk2a:dWg8o+Fe0gCyBw3Opnva2a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
236803482cfb584232cec675bd4ae440_NeikiAnalytics.exe

Files

236803482cfb584232cec675bd4ae440_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Exports

Exports

WilktMiootux
sqlceolbnFobvle

Sections

.text
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ