e17ff3eaa6e1fc7d13a87c865ac87e60_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e17ff3eaa6e1fc7d13a87c865ac87e60_NeikiAnalytics.exe
Size

140KB
MD5

e17ff3eaa6e1fc7d13a87c865ac87e60
SHA1

1601918d2b3aff3a949d1c64f1d54fad570628d2
SHA256

d564a7f79335e95fc9efa891fe35567dcbed6e325768c360f2ad8cd7643c938a
SHA512

d9fa6a6b5c9f597a000e8c596b587416ce9a8d5d9ce661520c7e00f17b79251f34caae5b8d775a41f10f26a856ca22949a3163d57efecb517795d280a98d63d1
SSDEEP

3072:vzWawqsX+1DWUko0e3ph5unmZI1T20cjNp9KxJEcr:viawql1DWi0eZYmZorcB+4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e17ff3eaa6e1fc7d13a87c865ac87e60_NeikiAnalytics.exe

Files

e17ff3eaa6e1fc7d13a87c865ac87e60_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Software\Facebook_Auto_Commenter_v20\Adder_app\obj\x86\Release\Adder_app.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ