164e8d2d796b654de9035fc83bbf6610_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

164e8d2d796b654de9035fc83bbf6610_NeikiAnalytics
Size

2.2MB
MD5

164e8d2d796b654de9035fc83bbf6610
SHA1

332b896183234d2f3ca4b43a688a2a82c6092b94
SHA256

b3abb7fe277643d5980f6ef636b412a2909bb3b37428c202c562ae4c26ceb40d
SHA512

340949efdb2ab488388c9479dd9f261582828ecc2ae524ac2572feb983ab3088d4415ca4b1a7a1076661f94bd88aa604ff58795f74f207c25349dd9430d326a1
SSDEEP

24576:TrwMIrwuHQy5Sk2L8StzC2ROf1IegqutJQ5FeQzcuC4r6HQD4/izRXTOkMtrIce1:TsH92LxzC2RAR5FeA6wDakOElMaFLk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
164e8d2d796b654de9035fc83bbf6610_NeikiAnalytics

Files

164e8d2d796b654de9035fc83bbf6610_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\_Bld\10657\7994\Sources\obj\Win32\Release\EvaluationContainer.NetFX45.csproj\Microsoft.Mashup.Container.NetFX45.pdb

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ