6f60bb883dab035e33d5731b56e63c90_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

6f60bb883dab035e33d5731b56e63c90_NeikiAnalytics.exe
Size

520KB
MD5

6f60bb883dab035e33d5731b56e63c90
SHA1

f35043a1b39bce5c91f4a144309b77c5af6b5e93
SHA256

4b6b80f0c418c316b5058d4d15c0484d8e0a9e288ccaaaafb3b0f463f12696c1
SHA512

7e72ad9beb1a94e8f160078d4e89bbde7583fa356b70af8d8ce4f67cba55baa83bf2d2f4a7a9722b1a31185779c5429ae286707bcb46225630ccefe8c60ba103
SSDEEP

12288:ghRhRhzhRhRhRhRhRhRh/um3LbGcEHOQSWEJq8h:ajjVjjjjjj/um3P7EHzSWm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f60bb883dab035e33d5731b56e63c90_NeikiAnalytics.exe

Files

6f60bb883dab035e33d5731b56e63c90_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\ZZ_ProgramSource\Tsubaki\SwFms\SwFileManagementSystem\obj\Release\SwFms.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 494KB - Virtual size: 494KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 131B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ