83a878e06d42977347ce6fa60abd0cf0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83a878e06d42977347ce6fa60abd0cf0_NeikiAnalytics.exe
Size

276KB
MD5

83a878e06d42977347ce6fa60abd0cf0
SHA1

13da64140c779ffc12d4e3c08d526b450f6c39df
SHA256

e3fcb2a72f5ca607a9fe24094b888ef748218e93799094c49ea9b9a196077acf
SHA512

0d4e66e24ead682da1b2af1b5a70fc0b283b4c70f6339a7c8bf5fe0867442b4e6573f4c2dc21a5a473a0245efa1fcbfa2013e1ccad66de962d55a511b0259374
SSDEEP

6144:IsE0qvPtbg+u6bcgxJkrGuOHoPhXoFPjN2LILJ0h:INvvPtbgscgxJkCuxhYF7N2E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83a878e06d42977347ce6fa60abd0cf0_NeikiAnalytics.exe

Files

83a878e06d42977347ce6fa60abd0cf0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\windss\Common\Source\VB\ComBw4401_PrintManager\obj\Release\ComBw4401.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 263KB - Virtual size: 262KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ