337d8d9559d2b9d3534ad7d471a3e3d471fbfe17ca81131486f7a3460d020238_NeikiAnalytics | Triage

Sharing

General

Target

337d8d9559d2b9d3534ad7d471a3e3d471fbfe17ca81131486f7a3460d020238_NeikiAnalytics
Size

23KB
MD5

89bd93da12d93206f02a941cc73876f0
SHA1

770b5c77c8c6d2268329e65d66a658f9415eb383
SHA256

337d8d9559d2b9d3534ad7d471a3e3d471fbfe17ca81131486f7a3460d020238
SHA512

85b8f2185f570397800fa727d875812742b24ff6e03a1f05f7742dfc98b1ef6633c12ce6ddfe4a919c137238fb657533704bbcc88fb6a3f82034357931b4e873
SSDEEP

384:9aB4SsPEqT98HqcSW6msyqMXxrHXEqmre9rAB5ZV5shSlA0JVWixLeqraw9X+Yil:9XDEquHqZqmXFsr1w3Lc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
337d8d9559d2b9d3534ad7d471a3e3d471fbfe17ca81131486f7a3460d020238_NeikiAnalytics

Files

337d8d9559d2b9d3534ad7d471a3e3d471fbfe17ca81131486f7a3460d020238_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Turki Alhazmi\Documents\Visual Studio 2013\Projects\ADFLY UI\ADFLY UI\obj\Debug\ADFLY UI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ