4a09522ba8fb6b9fb97d666ac428eaee2edb382e35d69d4feaa5e345394e1477_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a09522ba8fb6b9fb97d666ac428eaee2edb382e35d69d4feaa5e345394e1477_NeikiAnalytics.exe
Size

1.0MB
MD5

06dab12047b118b2656c97cbb9ca7ea0
SHA1

28e1c71bf99144674c986055dd2443366022c0ac
SHA256

4a09522ba8fb6b9fb97d666ac428eaee2edb382e35d69d4feaa5e345394e1477
SHA512

03362ac1dfc3d0414a76597fca2be9e96f6a088c2bc4e4a91d483443ae738e3266a4479460ebe7a8bdf59ec586cc37e4681d138a70d7b1c7edb1194f8b3ffded
SSDEEP

12288:kb7giggOci7PQRPXBw3yMflvh8Ccmjf/NOt+cTlultb+kT8Rx1mmiRzhjqLdswm6:eldCARNLdswmDEEPkpW3TvR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a09522ba8fb6b9fb97d666ac428eaee2edb382e35d69d4feaa5e345394e1477_NeikiAnalytics.exe

Files

4a09522ba8fb6b9fb97d666ac428eaee2edb382e35d69d4feaa5e345394e1477_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Rehm.ViCon.Client.Controls.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ