6b365d9d15f6799933324d6d67d59c20_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b365d9d15f6799933324d6d67d59c20_NeikiAnalytics.exe
Size

512KB
MD5

6b365d9d15f6799933324d6d67d59c20
SHA1

a1dc1eb194f983184d0968119e56b4c2f61818ef
SHA256

196f61a7dcb44eaed03c5c3d7152f8ed8c650e2f559d0574cbdf17e2ea8a2e44
SHA512

7228744dd7dce0311c5f6cb07b0c62521a2585958185e88e1afd8f9a765924c0929e089a322789671c5130ee7c8be0f84b845019cf9e5fc7b3b24c6181268b98
SSDEEP

3072:DJYnhtNtj0z0/0TvC0khtNhVc2EtkJ48sWhFyrtkA8EN0laOeI+iSvdQljH8/yOi:DJyWtkJpsyQthSheIbS2Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b365d9d15f6799933324d6d67d59c20_NeikiAnalytics.exe

Files

6b365d9d15f6799933324d6d67d59c20_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 345KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ