33dadb5a88f1f9a5b07f7687ba1e1ff0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33dadb5a88f1f9a5b07f7687ba1e1ff0_NeikiAnalytics.exe
Size

18KB
MD5

33dadb5a88f1f9a5b07f7687ba1e1ff0
SHA1

cdff87cfd77733339e3d07d288803af1df8f9c27
SHA256

95effefa2bc46c939c4a73e5c77a71fefbbe2e2854fb563108639f5bf6587b6d
SHA512

6fc5d82f66ff116d16d4710daf9791597cea6d8b865a90e248602e7b2a2662f9b8cea8055efd6b540e4c775ea1299cdfa069a60996a8f24b5c31ac4d8aca1fa5
SSDEEP

384:vV41aDIa+A5Jxw5S9E3WuhHWaZIzKDVOHM74Gk:vKaDIIxFE52aukgM7/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33dadb5a88f1f9a5b07f7687ba1e1ff0_NeikiAnalytics.exe

Files

33dadb5a88f1f9a5b07f7687ba1e1ff0_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\b353086b\43edc450\App_Web_kmhvybzk.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ