642d733f1733e9746c8969ab40dae130_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

642d733f1733e9746c8969ab40dae130_NeikiAnalytics.exe
Size

490KB
MD5

642d733f1733e9746c8969ab40dae130
SHA1

a75b1ad0abb0b8b5ba3c4c241f801cb432fe3721
SHA256

9658012e67493cb28981e02ce2f304ef6191aa60ac8446159cb0d84170e629ca
SHA512

25c24c084d7028b23953003daa6275600da73eae6aa9e98e7e33b48689e447bcf6885ca6e33ae282d9604455ff21befa539ffaa85f4632b098040ac8b350ea53
SSDEEP

6144:rUa3HXkh22hlECn/KqS15VIFI7M5IBOyVZsPl+3ivMD/fsygUa3HXUh22hlECn/W:om31gW7uMD/fN/m3FgW7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
642d733f1733e9746c8969ab40dae130_NeikiAnalytics.exe

Files

642d733f1733e9746c8969ab40dae130_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Aaron\Documents\Visual Studio 2013\Projects\Fxzion off Host\Fxzion off Host\obj\Debug\Fxzion off Host.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 209KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ