895f6f49061ef2730a8f26629fa5bdf0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

895f6f49061ef2730a8f26629fa5bdf0_NeikiAnalytics.exe
Size

450KB
MD5

895f6f49061ef2730a8f26629fa5bdf0
SHA1

1161b9f0d82c9e1eec7481cd5b45f455a0b2c30d
SHA256

1454a66a716163cecf14631bdccbc0046332e66d8f2f37e17c742c2dafdf335b
SHA512

b70ac316b7618d2587211cd6f6c017b72b9d59210fc132ddcb7a0a1818444b102d343408ce0aac6ff59047929f7c1c18a0a3e67cbe4804c34157c6604dcc4ba7
SSDEEP

6144:3AhepJtcabg1SLsDPuLhJbclo0kjoqKe14CNpMb8FKMKo5wRf+QA00OoyDsO:3Aycl0Ogjclo0k/ICNpMbMFKoUJV0Ob

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
895f6f49061ef2730a8f26629fa5bdf0_NeikiAnalytics.exe

Files

895f6f49061ef2730a8f26629fa5bdf0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Cory\GitHub\Caribou\Software\GUI\Caribou Test GUI\obj\Debug\Caribou Test GUI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 448KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ