4a442b8a171a437aca8817f8fd15fe70_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a442b8a171a437aca8817f8fd15fe70_NeikiAnalytics.exe
Size

188KB
MD5

4a442b8a171a437aca8817f8fd15fe70
SHA1

1eb924ccff481751648dc608caf7224f880ad1ae
SHA256

204c77a96c52294cb6dd10f0f617979c0439e53d4e9f1587ed26f06ff58060ae
SHA512

8b76f08df94fc5f531b4a79e8fb9f80ab03beda707822b88e7b6cfa00f2e0c1da998297627ff1102423a76dd4ac20903eb7db2e03eb208184569870da35ddd14
SSDEEP

1536:hDI0qULIgohNOxr/GADcV/+yGFHRbDZyFC1Q7HHk0OrzxIS:hDhohUyADcdbM1Q7HHS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a442b8a171a437aca8817f8fd15fe70_NeikiAnalytics.exe

Files

4a442b8a171a437aca8817f8fd15fe70_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\erden\Documents\Visual Studio 2017\Projects\mysqletiket_lebantex\mysqletiket1805\obj\Debug\etiketlebantec.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ