400a15bd5ba78774ea9e82e5d3c87e70_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

400a15bd5ba78774ea9e82e5d3c87e70_NeikiAnalytics.exe
Size

162KB
MD5

400a15bd5ba78774ea9e82e5d3c87e70
SHA1

d2e88016d8580131730cfd5acabe00b2d7ad98f6
SHA256

f6c9badbf42da964ecde4e1b6e97b0c8c7cd3dbbb12237ca79ef3d178980f03b
SHA512

c21a3b21b3fd07d8d2878252b799fd7de354ebf3d455694cb7627d85a29133af3cb493c24833e2cd42fd6ad3d68726a524c84400aaf85ff45c9137de87453af7
SSDEEP

1536:Bu6WJabgNjdSDGCRDYpcnJkkKqxSUQj+gqJabgNjdSDGCRDY:uJabgNjdSCK0pc7x0zqJabgNjdSCK0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
400a15bd5ba78774ea9e82e5d3c87e70_NeikiAnalytics.exe

Files

400a15bd5ba78774ea9e82e5d3c87e70_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\jonmp_000\Sources\Workspaces\SMSTurbo\WIAScan\WIAScan\obj\Debug\WIAScan.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ