2108d5a905b58fb69a0a98bd073503873e48953c244e9890a2f563253c9e0ac0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2108d5a905b58fb69a0a98bd073503873e48953c244e9890a2f563253c9e0ac0_NeikiAnalytics.exe
Size

28KB
MD5

d38a4d4895ae3886c916b790a0283ff0
SHA1

2c9a95c7eab1fa73e3050481cf0dc6060e1f67b4
SHA256

2108d5a905b58fb69a0a98bd073503873e48953c244e9890a2f563253c9e0ac0
SHA512

fa89f6ed426263b468864ff025ccd3fe9fa024b2bc262f5624e2c10e6c711c54eb4d9d87793b2c9e7bcd75c4ec6077398c49fed183ff0e6bfdd144c7a1a70d33
SSDEEP

384:q4/b85wp6soGJEpXtDYNHVOz3QsjwXa4zxzVFq6cQ9ch3Ll:Xz8ip6szutDYNYhOd+9l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2108d5a905b58fb69a0a98bd073503873e48953c244e9890a2f563253c9e0ac0_NeikiAnalytics.exe

Files

2108d5a905b58fb69a0a98bd073503873e48953c244e9890a2f563253c9e0ac0_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Builds\Sportello\NSP_Release_8.0c\Sources\Arch\Cedacri.NSP.Arch.DeviceManagerLibrary\obj\Release\Cedacri.NSP.Arch.DeviceManagerLibrary.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ