930b28f30ee86821eebd5f672646f5f0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

930b28f30ee86821eebd5f672646f5f0_NeikiAnalytics.exe
Size

6.5MB
MD5

930b28f30ee86821eebd5f672646f5f0
SHA1

d1dc109912097cff6dfd473078e4ca4668d00beb
SHA256

549918a4d2775c806feca631c643a18138cc44b81b0b372b04d7ea0bf4388c5a
SHA512

9bbd8744b153aaa824a9c34d30dd113aa8841ec205df8a023a13b309d0d044dcf8509035433047f6607f6102f9f9cdabc25196e20b723473a08719959adb2e3e
SSDEEP

98304:VI9tiSH6a6gfFCZ8th/yp3qvZ4ypOKRxoBBTxBQk6dtQs:VAH6aff4+4p84yjRyBNxqQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
930b28f30ee86821eebd5f672646f5f0_NeikiAnalytics.exe

Files

930b28f30ee86821eebd5f672646f5f0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\BuildAgent\work\33b2b67282fffa05\tminstaller\Teramind.Setup\Teramind.Setup.Remover\obj\Release\Teramind.Setup.Remover.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.4MB - Virtual size: 6.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ