382090c252f0ac9cd3ddca91a10deeb0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

382090c252f0ac9cd3ddca91a10deeb0_NeikiAnalytics.exe
Size

3.6MB
MD5

382090c252f0ac9cd3ddca91a10deeb0
SHA1

7c01fdf8318acc6521db28668944c3a634497813
SHA256

5ad6fd6cf2b39926c9b3db7350f8c2dd5a230d09b418160b19b9e141b2995727
SHA512

bfe5bf233e2474fb6ca0f9da89f0b14eb01bb645fc9fdad9a410bd377d1e6b4c0f2807e0973e13770f8dee258904b86def17d66564a03825174e77474917c305
SSDEEP

49152:ttJQoDbDHxzZ6khVsIO9DCK2husf1CWiayA+MIgD+Mp:t7PPBZ6k02usf1CWiay

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
382090c252f0ac9cd3ddca91a10deeb0_NeikiAnalytics.exe

Files

382090c252f0ac9cd3ddca91a10deeb0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\agents\3\_work\10\s\WPF Application\InScribe\obj\Release\InScribe6.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ