7262414f3abf1fac38f53d308e0ee2d0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7262414f3abf1fac38f53d308e0ee2d0_NeikiAnalytics
Size

1.7MB
MD5

7262414f3abf1fac38f53d308e0ee2d0
SHA1

421d25f2cfbf8d5d8423d99e5f53579aff62bc1d
SHA256

36447a1fe96ff71c30d6ae3a0722c0fce1edf9dcd50f73f08ffcc8b7c6196eac
SHA512

f43e80cb964ba707de3fadaf30858f2e509500af943dcd14f59e585c5bd6e0aeb60f1ed02558cd76af79ddbf2a019e835a94c9e5097ea5737fa790c4053de8b8
SSDEEP

24576:UcYEEX5ixEBoN4vXdwvJypHi92/EPsSEE5IFdnOGvA30BhNLbqNSu71ag:nxRTqC9FPoE5gdOG+mL1u71

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7262414f3abf1fac38f53d308e0ee2d0_NeikiAnalytics

Files

7262414f3abf1fac38f53d308e0ee2d0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Source Code - Visual Studio - 2017\SalesTool\SalesTool\obj\Debug\SalesTool.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ