be0f5c5f3542b77b9589083c5cdddd60_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be0f5c5f3542b77b9589083c5cdddd60_NeikiAnalytics.exe
Size

130KB
MD5

be0f5c5f3542b77b9589083c5cdddd60
SHA1

2d7c4a9f32b97222b532853edf0ff44bad7cbed1
SHA256

6c726618c2fcf0206164a1d7cb0600ec0ea2c9f46f77304d8db1bf21a0098d51
SHA512

5678ae57da2cb83eb9175d15209b01e50da955a7c75be274ca206cff4580d7add89981eaeb92ae5a16c978399d6ec218cefdddcdd7d0a85ef1b5e6a2ae8322ab
SSDEEP

3072:91pd5KE4UqD3rEQ4nEuY1pd5KE4UqD3rEQ4nEujXsX:91kUqD3t4EJ1kUqD3t4EYX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be0f5c5f3542b77b9589083c5cdddd60_NeikiAnalytics.exe

Files

be0f5c5f3542b77b9589083c5cdddd60_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Daniel\Documents\Visual Studio 2013\Projects\Sl_Ascensores v1.2\Ascensores\obj\Debug\Ascensores.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ