222e05dfcda2624cdd6d90edc8baf52dc22f990cf6da5f85ba73708da5cdafc6_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

222e05dfcda2624cdd6d90edc8baf52dc22f990cf6da5f85ba73708da5cdafc6_NeikiAnalytics.exe
Size

6KB
MD5

cb5e50799ee7e8dfb019cae0c19907d0
SHA1

94813d697595841add8507a3b4318c9b89586859
SHA256

222e05dfcda2624cdd6d90edc8baf52dc22f990cf6da5f85ba73708da5cdafc6
SHA512

ad7d8556ffffa8761a0815a3a5e3cab72087d8617f080d28020b00abbf55f66b1f494192b35dfdd74a3c321af0be96b4714f0a13a72cb394a176ac6a15ffa115
SSDEEP

96:hy9ug7BJwaM6l4HWe+eXe7y0J1/5UtrboHJTa:hC1BJwa5W3O221BUyHJTa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
222e05dfcda2624cdd6d90edc8baf52dc22f990cf6da5f85ba73708da5cdafc6_NeikiAnalytics.exe

Files

222e05dfcda2624cdd6d90edc8baf52dc22f990cf6da5f85ba73708da5cdafc6_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Jenkins\workspace\IRISPowerscan\IRISPowerscan 12\Build to Setup\Setup\CACheckServices\obj\x86\Release\CACheckServices.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ