5c732d8af851d4621af20fb9abd8efd0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c732d8af851d4621af20fb9abd8efd0_NeikiAnalytics.exe
Size

12KB
MD5

5c732d8af851d4621af20fb9abd8efd0
SHA1

c2506e68692d8b8c6192b87821d1bb3336f6c8ee
SHA256

4986f0767f7b4020f04a4eb867d7fb812815a69d58e298b590f43a864931cbb2
SHA512

edd7c31d47cfdf885830b602abd6a9fa18e4544d8b2e1cb6cf63e4b2ea2692ae793ed61cad9fd7827d336e06769b344c73291427bc03fc53b66fd74c4aca9556
SSDEEP

384:njPkz8zCZJY9k4Wjm6oGkezHvaLkY9IA5K8:njPkzDvxRtfkEHi1B5h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c732d8af851d4621af20fb9abd8efd0_NeikiAnalytics.exe

Files

5c732d8af851d4621af20fb9abd8efd0_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\6cfba526\5d28cd39\App_Web_ohjtjute.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ