3f54fd53ca33ffffc4725c5f0f798d60_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f54fd53ca33ffffc4725c5f0f798d60_NeikiAnalytics.exe
Size

173KB
MD5

3f54fd53ca33ffffc4725c5f0f798d60
SHA1

ace974a5dda041303708158dc3c22c0370277fa4
SHA256

9b44a2853588fd1bac68ffdd8b9da41db20aa5b494eff3ff7cf53fd610ad329d
SHA512

94f90bb2972f7a8738f12e5cdc8318badccaef1a693ad40eb94d1516d256a0b0c18276474a9c9b312dcf0559b1005329e3b5176a65266565b4241ee75095a66f
SSDEEP

3072:QR63Q77NkUsR0E6NOUsR0E6NSUsR0E6NOUsR0E6N0g1JUsR0E6N:QgQ7J1suEgbsuEgHsuEgbsuEg0g0suEg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f54fd53ca33ffffc4725c5f0f798d60_NeikiAnalytics.exe

Files

3f54fd53ca33ffffc4725c5f0f798d60_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Sunny\Documents\Visual Studio 2010\Projects\GuardProtect\GuardProtect\obj\x86\Debug\GuardProtect.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ