cf4678b2674f2eebe5deec19dba6c500_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf4678b2674f2eebe5deec19dba6c500_NeikiAnalytics
Size

22KB
MD5

cf4678b2674f2eebe5deec19dba6c500
SHA1

0f1fa9f2e73300f44c507b1f79443d3ffc98f190
SHA256

aaf1a65a871cbcc79b958349d85761609ac339e8b5937e27d45e9ce67c284ac7
SHA512

1678e4f6393b160ddb79f046c27aaeed37a9887ef0e44ac5be4687050cbd4bcc05cafb5e998998da285dc5b7a28d0613fe27538b50143d7963266bd53a25c990
SSDEEP

384:pvFPvK96uLxykANV0bJvpEtKImd1Q5a6sX/xykANV0bJvpEj:dF83EKQG/3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf4678b2674f2eebe5deec19dba6c500_NeikiAnalytics

Files

cf4678b2674f2eebe5deec19dba6c500_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\rshk\workspaces\workspace-visualstudio\FielcoWebTicketManager\obj\x86\Release\FielcoWebTicketManager.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ