5462d1163b360175156190c648bb1a50_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5462d1163b360175156190c648bb1a50_NeikiAnalytics.exe
Size

2.2MB
MD5

5462d1163b360175156190c648bb1a50
SHA1

540abd207210d414623bd0b2c55c8b22d8b5d9c7
SHA256

a689da9c62b5bf0e8243abc3ed2e195c5c9c03640c6c95b0dee51fe6dbc735f9
SHA512

008ff9946100d64fd6f43db6b4be45d8b59fbcf3ee7c9556f503845ec2e6ee054dd3e85a587e06d327fb7fc70d23afbe9a2c252f009855fc37f6282afb7209f0
SSDEEP

24576:Ogb9dMA3RNoo/O04zYD+A+UT3Ah+pDJjy3RNoo/O04zYD+A+U4UAh+hGVy3RNooe:OymA3D5Dpy3oEGVy3oEG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5462d1163b360175156190c648bb1a50_NeikiAnalytics.exe

Files

5462d1163b360175156190c648bb1a50_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Projetos\SADI\branches\1.7\SADI.Cruzamento\obj\Debug\SADI.Cruzamento.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ