bea80fd789622f782a0ab2bfadb0aec0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

bea80fd789622f782a0ab2bfadb0aec0_NeikiAnalytics.exe
Size

913KB
MD5

bea80fd789622f782a0ab2bfadb0aec0
SHA1

9b37826126eefbd8b81c7c82aea930042511f1a6
SHA256

159919e8f217f18762bedd326c6925d33b75160beeb982c5b8d7132c0c6f4fdf
SHA512

fab9fb2e0430850a25c8fbcac4bb63554d0850a81ec568afa6d8f17a73df91c7b2c28ff3fab63a1e68362b732255211e38f62f8adc25b466623e7e75c52daa97
SSDEEP

12288:sdXhGm0MyaRDxEB4GfdXhGm0MyPbDFGmMMy:sJhx9R7GfJhxyPFx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bea80fd789622f782a0ab2bfadb0aec0_NeikiAnalytics.exe

Files

bea80fd789622f782a0ab2bfadb0aec0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Builds\7\src\Source\Source\Infrastructure\Shell\obj\x86\Release\Businessoft.WorkStream.SmartClient.Infrastructure.Shell.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 671KB - Virtual size: 670KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 241KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ