3e758da8778867194c81243dc5f38740f264d22253d5dc2195304660a8fdfc7b_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e758da8778867194c81243dc5f38740f264d22253d5dc2195304660a8fdfc7b_NeikiAnalytics.exe
Size

69KB
MD5

25352d9f6945fed271e3ba5faad36730
SHA1

7d41d7bbdacc60133f549f7e4ecaa42de8a3cea5
SHA256

3e758da8778867194c81243dc5f38740f264d22253d5dc2195304660a8fdfc7b
SHA512

26250b3f481db7f93888d429a37bc769629df4d5cef7782f03090dda272fed0ff795e31074e65fe31bf6a84d52037599437d632dc48d66139a45f0ffb95c886a
SSDEEP

1536:ouCew34aPDfbyRs1USg/fE8mAcvqg7K0ildbAR6ZXL:oCaPDfbyWtg/88QxG0ildbAR6Z7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e758da8778867194c81243dc5f38740f264d22253d5dc2195304660a8fdfc7b_NeikiAnalytics.exe

Files

3e758da8778867194c81243dc5f38740f264d22253d5dc2195304660a8fdfc7b_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\agent\_work\1\s\Kode\POS\Production\TsVbKobling\Campaign\obj\Release\Campaign.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ