6bf57ea72d4a528ae94d4a537bcdc36d804706b07b7fff316c378e648b91c2ce_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6bf57ea72d4a528ae94d4a537bcdc36d804706b07b7fff316c378e648b91c2ce_NeikiAnalytics.exe
Size

38KB
MD5

d4a344fc18b9d07412d71ccc9fa84590
SHA1

fb94c0a71c0cec18f8b7ab0bc59d02282b1b0610
SHA256

6bf57ea72d4a528ae94d4a537bcdc36d804706b07b7fff316c378e648b91c2ce
SHA512

c18dfe10f187b2a800fb0d1d2524b97018e040a5ebe03792995ea45e29eab3ad4508dfbf0ff0f0ee451d6000db7e19d6f8b95c0d7c29fb9b1ad395976884edcc
SSDEEP

384:XQZm2PDw4tUexeTR6pVNN3X9oKowsTY9Hi6GjQelwjXwagawmzUwkqOomSH9w+bF:0DS8VzGx61GjIVzw+2FG7cs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6bf57ea72d4a528ae94d4a537bcdc36d804706b07b7fff316c378e648b91c2ce_NeikiAnalytics.exe

Files

6bf57ea72d4a528ae94d4a537bcdc36d804706b07b7fff316c378e648b91c2ce_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Data\prg\K4Manager\K4gperimp\obj\Release\K4gperimp.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ