9a1cd31d707f7fd9b0cac0b515439050_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a1cd31d707f7fd9b0cac0b515439050_NeikiAnalytics.exe
Size

517KB
MD5

9a1cd31d707f7fd9b0cac0b515439050
SHA1

c05c4bb20c672d8d7619bfdcc70b9229a40c3120
SHA256

3742f7a440753dfeba73dc55ba21a0601f1014f0abff08b4c38cd84ff4f42655
SHA512

cc2d48167af055343e968f0b4648d4eaaa9b733cb192d1926cd7d8d0ac5f54fadcbab66cea1645395cfde965724b7cd30f60b0d8811fc0f38c1c84e4035c1af3
SSDEEP

6144:7Xo2lo7cpc6MXkmn9bpfrMhk2wppSqtbbbbbbbbbbtS:0eowoiqtbbbbbbbbbbtS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a1cd31d707f7fd9b0cac0b515439050_NeikiAnalytics.exe

Files

9a1cd31d707f7fd9b0cac0b515439050_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Rob\Documents\Visual Studio 2017\Projects\ClevelandNewHireDatabase\obj\Debug\ClevelandNewHireDatabase.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 515KB - Virtual size: 514KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ