683deade94d2f09db6f9d4918c59a520_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

683deade94d2f09db6f9d4918c59a520_NeikiAnalytics.exe
Size

151KB
MD5

683deade94d2f09db6f9d4918c59a520
SHA1

897db48989f7a1536672759bf013a94dd99ae55c
SHA256

197d46e24380d1ed025d32d2c0140c7edd5ef3d9830a9ce5182616fcf9d66dca
SHA512

a3c79cd6b96e690ca05ea6ad89590114fbb411c6b44fc530cf124e9cb53d3634e3776eda4ba7d89f33ef7f6d871060f2eeb518a5fc578593608b786babf01d79
SSDEEP

3072:V80Y44bcb5XNNT3Up9LBU/Uja4GoXn+34zBsytgc:KT44bc7zoXzsy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
683deade94d2f09db6f9d4918c59a520_NeikiAnalytics.exe

Files

683deade94d2f09db6f9d4918c59a520_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\ReyKratos\Desktop\RKOptimizer\Copia\RKOptimizer\obj\Debug\RKOptimizer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ