a5e5029e63de792915d897c6f71db930_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5e5029e63de792915d897c6f71db930_NeikiAnalytics.exe
Size

501KB
MD5

a5e5029e63de792915d897c6f71db930
SHA1

a3a511ed3bbd796870ecd84ea7bf823410230664
SHA256

3b2e9101dcf03db9d362d80ba3a53e00fc4e096a867cc8fa3fde5c160db9c560
SHA512

69d7eec39d0bf4584be193383c022675284aa7a1b1527f876cbdd6f7fba7603488d62749fbb482e014198cf9bec91117a1eea43f19ad34dc1481c0efba13cf09
SSDEEP

1536:ZWz5aYYEHo/u4TnXtNwXVaf4tZEZWORTG66X6m6A62+nsraef06m6V2p2c6q636W:ZWzkYYEAzDk2refyp2DEG16mFbZbrOQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5e5029e63de792915d897c6f71db930_NeikiAnalytics.exe

Files

a5e5029e63de792915d897c6f71db930_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\work\1407 LY.IPC\source\LY.IPC\LY.IPC.Client\obj\x86\Debug\LY.IPC.Client.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 498KB - Virtual size: 498KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ