06208065b8fd1f38c77a40472ba54566f041320ec1555844ad914b6de69a3040_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06208065b8fd1f38c77a40472ba54566f041320ec1555844ad914b6de69a3040_NeikiAnalytics.exe
Size

62KB
MD5

399aa139463f1cdc489f03bfbd72eb50
SHA1

67a3c14961d5e83775db71a4c94d7863d5bd29e2
SHA256

06208065b8fd1f38c77a40472ba54566f041320ec1555844ad914b6de69a3040
SHA512

3918ce0220ab72f75c403d0be820488617a8a9938a0d120dbdb61ddd481673f63cc72ace5d5561a374078833178f8583ad1697bdb067fb2ca7d874955b27953d
SSDEEP

768:X5fxoJ7PKyImrRHTYlEG4TfCxx4MQurkZHBrk08TtGetTXkgHK27i:YJ7PqeeEXCf4MrwNmXTcetDHT7i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06208065b8fd1f38c77a40472ba54566f041320ec1555844ad914b6de69a3040_NeikiAnalytics.exe

Files

06208065b8fd1f38c77a40472ba54566f041320ec1555844ad914b6de69a3040_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/framework/OpenMod.NuGet/obj/Release/netstandard2.1/OpenMod.NuGet.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ