4585c65206e28d467bf969b9042c4c50e233009cef2cde7f4498e1192baa7dfc_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4585c65206e28d467bf969b9042c4c50e233009cef2cde7f4498e1192baa7dfc_NeikiAnalytics.exe
Size

152KB
MD5

87386e3646fe01f0839acc1d26eaaf90
SHA1

fe5704eb6763d39f396f42e6e569f99e7d59c8d2
SHA256

4585c65206e28d467bf969b9042c4c50e233009cef2cde7f4498e1192baa7dfc
SHA512

bfbd56258e83b181bbd8bcfbe735ca1b032ffcbbdd8b445aead0ad8468f23092d2d8855fefd011170d6fe15b37d37c70051e67905701ac360dbdf12d8355865b
SSDEEP

3072:BoRNk8VNhjDPAxCTElmHIZacGn1x/Zr/hAKJXa4Esuv7Z/oXSJMT+MzMhU4Fm1Mg:BoRNb/hV2BHjc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4585c65206e28d467bf969b9042c4c50e233009cef2cde7f4498e1192baa7dfc_NeikiAnalytics.exe

Files

4585c65206e28d467bf969b9042c4c50e233009cef2cde7f4498e1192baa7dfc_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\cf31b8a7\19625a1b\App_Web_nevuurog.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ