1e931f4f2715df717d586b24560963a0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

1e931f4f2715df717d586b24560963a0_NeikiAnalytics.exe
Size

424KB
MD5

1e931f4f2715df717d586b24560963a0
SHA1

fa3a2cf6831a6268762167b75dde5dfd50b853a7
SHA256

a61008da6b2a939c47bd2c9cf1c6ec3be89474b0ee409d7804546f3197f92c4e
SHA512

222ea603279a647dad711d8e0aabf6fe78f6c98643b8448b4fdeaded0bcddb005ee5006cfb3cd013bd9c65754bd1b932616e07b0167426d4fa062ba6ebd4ac39
SSDEEP

6144:3UVybyr1bXfjBGkLfHn1s0CYw9HljkRAeA+oA7Z6LebPuXLf:kVymlX1/Ju9Cn7Z6Lwar

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e931f4f2715df717d586b24560963a0_NeikiAnalytics.exe

Files

1e931f4f2715df717d586b24560963a0_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\shima\Documents\Visual Studio 2015\Projects\OpenCvSharp 2.x\src\OpenCvSharp\obj\Release\OpenCvSharp.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 422KB - Virtual size: 422KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ