9a18397d23de66b068e00c8bda476770_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a18397d23de66b068e00c8bda476770_NeikiAnalytics.exe
Size

38KB
MD5

9a18397d23de66b068e00c8bda476770
SHA1

e18cae400aa379c53ea73775041e0dd21ae6cd94
SHA256

b39d6b226b2ce8043de7814c7d6a1c9e57b0b795a48c334624b71ac72f58bd78
SHA512

8fe9c81516f71b86ccabe53e9f0e03ba1873bc90bf59922ce16825c4f6942de98928ca66f5a58289a5c5f6f6297414cf9a97a0b7cfe11f338db73cde385761ac
SSDEEP

768:EG0CNrmFCCTePpDC8sYxYWIasdB61u6tN9kRyf173Xz/2Ipy9AyePpD:Vp4C+apebaJ1j9k0t7CIpy6yap

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a18397d23de66b068e00c8bda476770_NeikiAnalytics.exe

Files

9a18397d23de66b068e00c8bda476770_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\build\CoreRelease\Code\Tools\Wrapper\StringExtractor\obj\x86\Release\StringExtractor.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ