7273677aff5ad0a369e63e551eff2d20_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

7273677aff5ad0a369e63e551eff2d20_NeikiAnalytics.exe
Size

16KB
MD5

7273677aff5ad0a369e63e551eff2d20
SHA1

8bae4d1967c2b2a46248f403e345f3d413bbcff5
SHA256

1fa46812c04df8d231a95cbb5cebfb0d6b594c9a9f90cc0797787ee68b37e50a
SHA512

89a57ce53556bcf4f5f86de8f039633bff4faf5add254571f5227215cb2ddb9b9481c45719e2f8ddbbd08273f2ff0b81a88faa198f8d924ade855535075e27b6
SSDEEP

384:NOTu+vKadLNvlsCnkIQNByh4rXcH6sbdqXSk4BM/9ZGVC8zZqoh+WY:NkLNvlsCnDEQqLWLAXRDGk8zYoi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
7273677aff5ad0a369e63e551eff2d20_NeikiAnalytics.exe

Files

7273677aff5ad0a369e63e551eff2d20_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\WiseEyeOn\App\On39\IPTextBox\IPTextBox\obj\Debug\IPTextBox.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ