3b9e700808afdba0aec4637975d32340_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b9e700808afdba0aec4637975d32340_NeikiAnalytics
Size

56KB
MD5

3b9e700808afdba0aec4637975d32340
SHA1

271ef8e09268f6a74865939ef9c1b8df19a8c9a5
SHA256

6a40676930a276963e881e5fc46d9f8139adb15d77ac9ec8c9e2294f27effb8f
SHA512

94120b6b3e2f4f9ee00bc82f7823a6d92144f541cb722f6943cb107e302bcba8d6316b11c1638ddcb6e02664dc879e8edd3623d7d2c7c8af952c7fb88070c612
SSDEEP

768:seEIKV8GxXgXnXUNcNuuY9v9ukzzmXLtYByJ4X:se88AbZDzzmXLSB0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b9e700808afdba0aec4637975d32340_NeikiAnalytics

Files

3b9e700808afdba0aec4637975d32340_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Headsoft\My Documents\Visual Studio Projects\MCERemotePlus\obj\x86\Release\MCERemotePlus.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ