8b054622be7133b8e2118391f2afba849b3953a15fbca63bc65a3165ad657136_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

8b054622be7133b8e2118391f2afba849b3953a15fbca63bc65a3165ad657136_NeikiAnalytics.exe
Size

11KB
MD5

ef507ed2631396ebd3259be26658e760
SHA1

a0deb7712dde69e066ff4d0219c7c5da0504aeea
SHA256

8b054622be7133b8e2118391f2afba849b3953a15fbca63bc65a3165ad657136
SHA512

e2264bdab009a7453f719406ad2533e9dcd42f74002757b7d519c27bf9916d6f550e59c31e487ccb1361500218c182938e497c72ba322dc1a14aa157dd65a00c
SSDEEP

192:VUpU1U0D0lqWhCHbggSzcfVasYtbeY5XwbMsbU8b:UU1KQIC7gdzcfVasYt1a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b054622be7133b8e2118391f2afba849b3953a15fbca63bc65a3165ad657136_NeikiAnalytics.exe

Files

8b054622be7133b8e2118391f2afba849b3953a15fbca63bc65a3165ad657136_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\8c7720f4\1c505455\App_Web_npha3jvl.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ