e81a2ec84e049923a6e6414b88751ba0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e81a2ec84e049923a6e6414b88751ba0_NeikiAnalytics.exe
Size

1.8MB
MD5

e81a2ec84e049923a6e6414b88751ba0
SHA1

ff2c2865f2e40130321060085b841ea726962b52
SHA256

7c3ff94ff970e62940968eba339a388091be23f028eca02025c0b719d05dd47f
SHA512

3f6cf3b404e7749b516b7a360a5073f94cf0a36416a760b27b95244a76b4b119f7e9fd96fed6799438ab993401fd497d4207189e45dc70452e41c90f2fdc3955
SSDEEP

49152:LqmBbanuCbJ8sYi7W52Oavz3BTvwu6fZJuCbJ8sYi7W52Oavz3BTvwu6fZTuCbJK:umBba8ZSZVmBba4Zt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e81a2ec84e049923a6e6414b88751ba0_NeikiAnalytics.exe

Files

e81a2ec84e049923a6e6414b88751ba0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\wyrem\Documents\Repo\SituUploader\SituUploader\obj\Release\net8.0-windows7.0\SituUploader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ