297e05ccab3055653a860dae9926118c21a46366cfbd1f3ba2ea0c4fed568ce4_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

297e05ccab3055653a860dae9926118c21a46366cfbd1f3ba2ea0c4fed568ce4_NeikiAnalytics
Size

45KB
MD5

4aa81d2e24f0a64574ff565b0598ab50
SHA1

8806948c4865f280cff438ebb3b4da1495b64878
SHA256

297e05ccab3055653a860dae9926118c21a46366cfbd1f3ba2ea0c4fed568ce4
SHA512

9acf7b94d4f54241f560ad9e9227f6bbf6f4b0be750066960f49a9cdb74eca2a1120aadb345dd99febb18c2bd861ce25d39fe6a73ad7ca0e489b1cd7a2ccae1f
SSDEEP

768:BHto3kXdEsSnQsI8ghCvrrtP4HZ6zGMEWis7Q9f9YlQ6fBx4JZ7bg0:BHBasSnQsI8go90oGzWiIEWlQ6naJ7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
297e05ccab3055653a860dae9926118c21a46366cfbd1f3ba2ea0c4fed568ce4_NeikiAnalytics

Files

297e05ccab3055653a860dae9926118c21a46366cfbd1f3ba2ea0c4fed568ce4_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\bwight\Dropbox\Scentsy\Scentsy.KnowledgeBaseMigrator\Scentsy.KnowledgeBaseMigrator\obj\Debug\Scentsy.KnowledgeBaseMigrator.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ