636907e1e8c9969ccaa03c3d22c0dcd0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

636907e1e8c9969ccaa03c3d22c0dcd0_NeikiAnalytics
Size

993KB
MD5

636907e1e8c9969ccaa03c3d22c0dcd0
SHA1

c43025ad689b96b59f43c46f54b58e6894a2bea7
SHA256

114a9231bd3f1af11e68c23e5bb442704974eeeed83d4067843816d905ead41c
SHA512

949e5dc5fc3ca894b33c05893265945b243bb3ce54ea7a3b18cb8d0e40aa6b518f70b6acf3fa8ab28f659e72e72b79d5674b3ff33d8a5394d1cb9a9c3c8e279e
SSDEEP

12288:naJRsMXdLwLcdBBBBB4OpJUQ6Vr4EtCDCYsRouTfvvvubiMsNfo6509neYoVRSoP:naJiaqFOpKr4EtCDCCuSbiD5LZV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
636907e1e8c9969ccaa03c3d22c0dcd0_NeikiAnalytics

Files

636907e1e8c9969ccaa03c3d22c0dcd0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\agent2\_work\4\s\FujiFilm.CWM.Workstation.GIS\1 - Apps\FujiFilm.CWM.ES.Workstation\obj\Release\FujiFilm.CWM.ES.Workstation.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 909KB - Virtual size: 909KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ