3ae338e999001a0d6ee435fa3fc577d0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

3ae338e999001a0d6ee435fa3fc577d0_NeikiAnalytics.exe
Size

2.1MB
MD5

3ae338e999001a0d6ee435fa3fc577d0
SHA1

be6a772cf61dc04d07d65043f309165434c04cef
SHA256

a4a28c9b48b730fad5d30fd7a490bdd5dec0e714651d73748b38a9f58cc27d51
SHA512

a2fe558d4b6608d1d2177564f7281045252f5737209f755f1ae642b2c7f5e673b9cdc8830c9804f9310e53cce0bb13f6ac73fe32c9f68ce19568d0e2b602b55e
SSDEEP

49152:WZrh4usuCtpL9Zrh4usuCtpLqoJdXN0BMOwLloBrug:WTN6ppTN6pVJdXN0B7+s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
3ae338e999001a0d6ee435fa3fc577d0_NeikiAnalytics.exe

Files

3ae338e999001a0d6ee435fa3fc577d0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\_Bld\10657\7994\Sources\obj\Win32\Release\EvaluationContainer.csproj\Microsoft.Mashup.Container.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ