7cb0aba1709541e27e47bd98c5434880_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7cb0aba1709541e27e47bd98c5434880_NeikiAnalytics
Size

172KB
MD5

7cb0aba1709541e27e47bd98c5434880
SHA1

74bd0782b28084883cd5d69fbbed95371643a01a
SHA256

6182f8260723bdc47fe126afa96d77ad652281134f43dbdc207a2805ac962a46
SHA512

065ff6af2abd17927e0725ff248916ba43e7dd1393f0e8f5c8700cbae623def9c55026930502a6c14e499b09d6c56d1661fc7aacba9e81a8dde1b76d2cfafbcc
SSDEEP

1536:E43Uo3omZnzg2zISmcqYAih5gCTHIFhpH+dwtbkdjxblLB89hpl9ZxFNBZltpxlj:EgUo3oEg2scdARgAIfVt0Gn9USmPA0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7cb0aba1709541e27e47bd98c5434880_NeikiAnalytics

Files

7cb0aba1709541e27e47bd98c5434880_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Fujitsu\Documents\Visual Studio 2010\Projects\RTSL surveyor(new)Petrom_stqr_for TMU5\RTSL surveyor(new)Petrom_stqr\obj\Debug\RTSL Surveyor.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 160KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ