6c8c5637906640d4bd3866756e3b5feabc735ffbd3f092431549e03dfc11666a_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

6c8c5637906640d4bd3866756e3b5feabc735ffbd3f092431549e03dfc11666a_NeikiAnalytics.exe
Size

865KB
MD5

bce28aedc62253fb54ca469c64653990
SHA1

0a762e82b2fc646600a31df35874dac42076476f
SHA256

6c8c5637906640d4bd3866756e3b5feabc735ffbd3f092431549e03dfc11666a
SHA512

60c827d56f0ec10ddf9d98d04a7744afffd7dcd102d596707d460a2bfb08547c50ced31dd44b9b21f144a38948717c295adb6ebf19d1abc07018357903e8da9a
SSDEEP

12288:tMcpL/ztv1xb0cnKt+QEhKBFLfD3Gl0n21sglx5Bhi8ilp/l9WGagpNAUSg:LKssgz5Bhi8ilpN9WGagpNAhg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c8c5637906640d4bd3866756e3b5feabc735ffbd3f092431549e03dfc11666a_NeikiAnalytics.exe

Files

6c8c5637906640d4bd3866756e3b5feabc735ffbd3f092431549e03dfc11666a_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Rehm.ViCon.Client.Views.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 862KB - Virtual size: 862KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ