60585a75708331f196063a31587a8fd0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

60585a75708331f196063a31587a8fd0_NeikiAnalytics.exe
Size

7KB
MD5

60585a75708331f196063a31587a8fd0
SHA1

6a3cc7a29ebcac5ed938fdc2d99168d3121a47af
SHA256

5ed930c38a8b8062dfb1253413b2bee1441fb1a0df2d46e64b2a9421283b3706
SHA512

24613f5505ab8d271ae2f8dd40b272e8a1d7ff8ce027b945c07e58fbb078ba73c54079bc2ac65b5efbcba0404df623cb0bf7d210d77bf47b1a6e7ccd5b61dad5
SSDEEP

96:MZoTYYc+fIwmH7cOW5iIZBd2+RPgfrBpMD8w3TvEzNt:MZoTYBN7IEIZX2yPUMgIG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
60585a75708331f196063a31587a8fd0_NeikiAnalytics.exe

Files

60585a75708331f196063a31587a8fd0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\C# project\CptrLib\Test\obj\Debug\Test.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ