57ed0965f655953951a8cc873e15c9c0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

57ed0965f655953951a8cc873e15c9c0_NeikiAnalytics.exe
Size

3.5MB
MD5

57ed0965f655953951a8cc873e15c9c0
SHA1

aecc892c9aadb50cf633d4a243ee11d8014e0970
SHA256

50f730a738c17f549908caf1998522dfba42ae9c3c6c0ebfdc9339159a746b6b
SHA512

561f0c88e90a9dca560af02a8069f90fde084556f874efef72bb35795aa00e2bb001ecc2e0a1a2f87d56c57a9e0cbc8e6c29e1fddc0444d7c8ea3312f1f309e0
SSDEEP

49152:gPNw3cXdxScQTBAaKGs3SwDSaETrZrytg6V2YyjRabMA1dTtOvJVPlHfFvNFi/Gu:glZAs3SaSa4I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57ed0965f655953951a8cc873e15c9c0_NeikiAnalytics.exe

Files

57ed0965f655953951a8cc873e15c9c0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

F:\Project\RL.MES.Standard V3.6_ZhongJiang\06_RL.WPF\RL.Wpf.MES\obj\Debug\RL.MES.Wpf.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ