625564992b6089d6623339410ebba8a0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

625564992b6089d6623339410ebba8a0_NeikiAnalytics.exe
Size

9.0MB
MD5

625564992b6089d6623339410ebba8a0
SHA1

9a6fa4b786b9e8c124c8df779f65779d32257f10
SHA256

2b916c6f55d45b119aa91c8e152c56699f1bc1145dd1d8d392d76ecabcbd5b67
SHA512

70420c36041b59333420c444c99bc1c0cba407b0382da08d1f71e99bb6de20daf784d25c8ba68cfca74fdaf3fcedb586710d02fc911e2dfadc161190b154e674
SSDEEP

49152:0FFJQSttSWSKqTECqVXkXkXkXkXkXkXkXkX3X:SBfRSKqwT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
625564992b6089d6623339410ebba8a0_NeikiAnalytics.exe

Files

625564992b6089d6623339410ebba8a0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Xm\WMSMCheck\WMSMCheck\obj\x86\Debug\出库复核程序.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8.2MB - Virtual size: 8.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 825KB - Virtual size: 825KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ