d721abc3ead6fd6f784baddd8f0b3180_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d721abc3ead6fd6f784baddd8f0b3180_NeikiAnalytics
Size

270KB
MD5

d721abc3ead6fd6f784baddd8f0b3180
SHA1

256ef225051f417e9dbef0514f7039a1adbe58b9
SHA256

f485db1270e7eea5d7efd7c33caca9a1b701d57fb8a38349fba6d7b58a1e9bb8
SHA512

174248eefbde4dd81be5b3bba8b498f99f2e0de8fd18b4b04c3b4366793edff6559f56785d5fde7329449891e88cb2e188b6a25e7b569d1357e5f6429a43df0a
SSDEEP

6144:zznm34PNxXKJn8FAdBhB5tY76krIgfRkfQe4zxBcU:g418XklF5/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d721abc3ead6fd6f784baddd8f0b3180_NeikiAnalytics

Files

d721abc3ead6fd6f784baddd8f0b3180_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\gkoufoud\Documents\Visual Studio 2012\Projects\IonioLdap\IonioLdap\obj\Debug\Ionio Services Manager.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 239KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ