2b17a43c4b1231cfd6848a63762f3c10_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

2b17a43c4b1231cfd6848a63762f3c10_NeikiAnalytics.exe
Size

3.0MB
MD5

2b17a43c4b1231cfd6848a63762f3c10
SHA1

ae4cf8772aaec594a1631327d5ac5cd7f517dd20
SHA256

a68255a83e3ffa0f7acea738e362d97c119ae6003cc4b9acfe5aaedd87c3b47f
SHA512

de50dc2ee75ecc5a1bf02e94201f56f74899ae06fcef83c75a5dc3791691777f19f6c0cf38be09f45e7f4c0bbfb04aefda425f6176dfb30664b8e13d44930b0b
SSDEEP

49152:ssDOPDtoZerRokpRrRokpAHF+3j5D78OBUS9VfWPakOElMaFLk:ssDOeYrRokbrRok2Cs1S9Fmak7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b17a43c4b1231cfd6848a63762f3c10_NeikiAnalytics.exe

Files

2b17a43c4b1231cfd6848a63762f3c10_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

p:\Target\x86\ship\setuptools\x-none\Flattener.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ