8941a798c363adbe439fb38d0de746c0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8941a798c363adbe439fb38d0de746c0_NeikiAnalytics
Size

2.1MB
MD5

8941a798c363adbe439fb38d0de746c0
SHA1

9e36a5ccbc6674457cc0e819662e57709f668aaf
SHA256

03f5808716336df843ae52507d9ebdd4d60e9a5a51d82cb941c17052efbcb4ba
SHA512

327542a8f69059c8d3ce72f98baed0a70f959460c4c533f609d83dbd9bdafeb8edd0fdb450caaa93328dc383f765022b1926f7156ce86b8e552c00b05b76a933
SSDEEP

49152:P64VtawCl5znCYYpQhXPvgOFyiyAvTSbV2l+:i4cwCzDXhXg4vGhn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8941a798c363adbe439fb38d0de746c0_NeikiAnalytics

Files

8941a798c363adbe439fb38d0de746c0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\mpicco\Documents\Visual Studio 2013\Projects\sales-manager\sales-manager\obj\Debug\sales-manager.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ