9c2e700d0e9d731ad335a18db3a61880_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c2e700d0e9d731ad335a18db3a61880_NeikiAnalytics
Size

1.4MB
MD5

9c2e700d0e9d731ad335a18db3a61880
SHA1

689c08bec1d36f9efc79ef01048b12ea7fd30eeb
SHA256

39f1f011b4e53ce3e3057fcc23e9e3a2913308ee01d65259a83bf9df6edbb407
SHA512

74d693028e7bb157de2eea1788997392e2b53ddbb529717907a2c4ccd0ec22fc76468b9718078e2e718e5c6fcde5df1880f93550b7eeaf41680c6aedc7d5e1f7
SSDEEP

384:N5bzzxrHomFdxokwdwAQ1vwAQDwAQvwAQYXUvJpwOivhesNGZWch:Wm/cvQpK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c2e700d0e9d731ad335a18db3a61880_NeikiAnalytics

Files

9c2e700d0e9d731ad335a18db3a61880_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\jijingzhou.SH\Documents\Visual Studio 2012\Projects\WpfApplication1\WpfApplication1\obj\Debug\WpfApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ