3c6c26e59a02cd6be9c0b782ca5c5570_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c6c26e59a02cd6be9c0b782ca5c5570_NeikiAnalytics.exe
Size

115KB
MD5

3c6c26e59a02cd6be9c0b782ca5c5570
SHA1

a77c79c55a31d978276779981a5a58d69089996f
SHA256

8e6da8b6887aeff989294e30178b8fcff7e3ddd8879f24c36a83acf4fd078288
SHA512

89ffe061b3c931bd79caab62ea06198da98a8d977cd4cafc5b8a1e2464d06709d541a7273dac1032cdc6ed762d5367eb3c2a3801ff714b55ba03064c2675c7c8
SSDEEP

1536:5AbRnH0RDVmpdgAD2sYU1GGEeTzxm7g8KT4PQy/3gT2+kc:KnH0RDVGtPAWzx+7Pnfd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c6c26e59a02cd6be9c0b782ca5c5570_NeikiAnalytics.exe

Files

3c6c26e59a02cd6be9c0b782ca5c5570_NeikiAnalytics.exe
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\95126ce9\6d005bfa\App_Web_sm2urxvl.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ