211dfaa0276aa9e843263115446283a52e68f55e1fa623cbf4ca5b75433d272e_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

211dfaa0276aa9e843263115446283a52e68f55e1fa623cbf4ca5b75433d272e_NeikiAnalytics.exe
Size

11KB
MD5

50ae87058d1b6737c8837c3efaa88a70
SHA1

782f32791a493c68d9204611f7cb9728a2feffe4
SHA256

211dfaa0276aa9e843263115446283a52e68f55e1fa623cbf4ca5b75433d272e
SHA512

2f7a794e2cea6f399590a92d80ae810611837df004cd84e4410fd80a6dc2fdae6795bdc6723c3d5bf5ffdda593cb2c9228e9e68fa6888dccccafa8bab08c9fc5
SSDEEP

192:T8Ps9Rs7IUamnIFrUFhAulU4JnN85s885H85t5c4m5cRZ5cF5cegpoDZCpfWYiC1:T8Ps9R+IUamnIFoxlUMNYLQHYt5c15cD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
211dfaa0276aa9e843263115446283a52e68f55e1fa623cbf4ca5b75433d272e_NeikiAnalytics.exe

Files

211dfaa0276aa9e843263115446283a52e68f55e1fa623cbf4ca5b75433d272e_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\ndm_platform\Source\NDM.Utility\NDM.Utility.ProcessChecker\obj\Release\netstandard2.0\NDM.Utility.ProcessChecker.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ