c25159e5e9daf2a8f2d7b225b323bb80_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c25159e5e9daf2a8f2d7b225b323bb80_NeikiAnalytics.exe
Size

58KB
MD5

c25159e5e9daf2a8f2d7b225b323bb80
SHA1

0530713d3fd005419c100748a9541ecad0f528da
SHA256

aed22931ecd3007dbc582cf3969b9bbc7fdc8a7aa64ce4c79e38c5bead03dfbc
SHA512

015b947684475de7faed7f9d8338133c4adbf3cff8bfbd4eed7a2057aa40fc7ac8d501e7309d7e0ef134bfa0cc34da91a10f025ac3790eb1ba77351e2434c5bc
SSDEEP

768:KlHsnUQgGrdGF1sZz6jv5C+/3dQsF9TvzX/RHTmhk5/qhKQaIJ5IHv2fUCK:KlHyUKrMiFwdQizzXZzmmiKQtJ52V9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c25159e5e9daf2a8f2d7b225b323bb80_NeikiAnalytics.exe

Files

c25159e5e9daf2a8f2d7b225b323bb80_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Rehm.ViCon.Service.Plugin.Halcon.Deployment.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ