720e0225feef57ce66d6849b3065e0d0_NeikiAnalytics | Triage

Sharing

General

Target

720e0225feef57ce66d6849b3065e0d0_NeikiAnalytics
Size

877KB
MD5

720e0225feef57ce66d6849b3065e0d0
SHA1

880cf306255ded5485c3dd5ee0e7c67c28777800
SHA256

0ad8b30d0555cd6fbef271dd7f03fd17899399fe3b4c3dafe1a2190f7a4a92e1
SHA512

27df61829a51560a80ea337a167a629d5f9eac20bdfca583ef2fcfd5a3de11a31e7247dd87bcde7a437ae40e2a64d57b7bd3c153f58e9dd3a637324b14306336
SSDEEP

12288:zGMyODDXhGq7vKtgXSNfgJGMqODDXhGq7vK:zGzOX/7i2XSNYJG9OX/7i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
720e0225feef57ce66d6849b3065e0d0_NeikiAnalytics

Files

720e0225feef57ce66d6849b3065e0d0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Douglas\Documents\Visual Studio 2013\Projects\CMS Deluxe\CMS Deluxe\obj\Debug\CMS Deluxe.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 538KB - Virtual size: 538KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 337KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ