5441a0d43a8313950df1b6061b9c7460_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5441a0d43a8313950df1b6061b9c7460_NeikiAnalytics.exe
Size

1.6MB
MD5

5441a0d43a8313950df1b6061b9c7460
SHA1

ebb5d4a487e7ada7d1db941b47664b88310766c1
SHA256

90dafaf28a235ece7f1f6dc9ecaf8a3adc9902b6bd76691cad0fa14136d3abad
SHA512

a39bf3e6485821266b3387bf5d7f046657478b2dee05f8988932ae364c069bb5bcc003e767097d8c43661663522ae1704a24b25b525d5fb7a80eb32c7cb3320d
SSDEEP

3072:JLRP6ZSUlhpNRKB7mtfWY9yXwZtZpTD7Io1wLSHhOxwdr2iswEOinD96VOiwX8Fs:AfLw+HUR6kqGEAm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5441a0d43a8313950df1b6061b9c7460_NeikiAnalytics.exe

Files

5441a0d43a8313950df1b6061b9c7460_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\[WORK]\CENVIS\4DTermo_1212\4DTermo\CameraCaptureWinFormsApp\obj\x86\Debug\CameraCaptureWinFormsApp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ