4af1f76181934a9b18b3b477123426a0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4af1f76181934a9b18b3b477123426a0_NeikiAnalytics.exe
Size

123KB
MD5

4af1f76181934a9b18b3b477123426a0
SHA1

448ae37b3d7a4ab5d68a3803f59387c945d96b07
SHA256

ddbd2e3d79673d7549f6f156a5259cff099a6d5c9c7820f0503432d1d9a1ae49
SHA512

c614fb2a8c32180dcd12848e219dad7f409da3d59f97d9d24eeee135097d0ad3f2924c106acb1de0045aaad5867ef9c148f782bc2209d2354eb8a5cbf02efdb3
SSDEEP

1536:v+gFEA/ZjoFkuge30QBUB+GIUtIIUtU0HIUjHhIoaUIHU0jpjo6mj+6dW6dz:BFEA/Zjqgjmj+6U6d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4af1f76181934a9b18b3b477123426a0_NeikiAnalytics.exe

Files

4af1f76181934a9b18b3b477123426a0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\项目\公交调度平台新能源车\BusPlatNew\BusPlatXN\obj\x86\Debug\BusPlatXN.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ