17315cd02d28dfebc47c87c25939bc20_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

17315cd02d28dfebc47c87c25939bc20_NeikiAnalytics.exe
Size

3.1MB
MD5

17315cd02d28dfebc47c87c25939bc20
SHA1

e59c1d7c60590ff29664b848651432478fbb61c9
SHA256

93d2109b1f97ef0dcc0a64195c5fb9afbc54f9df20e63b90b67add9c51bd6347
SHA512

1d427e0684af8ddcd6884aad7bf31f2e8a5beffefde29a1b559ff58d8fba9f2952de41b8b1101f9bc4591c6a0ec70181b7a72dd821b054e60268aae4702f8435
SSDEEP

12288:xAAF2R6FtUMFS62uU33c9yR6cQYeOs/hNM518UNjAcK6Ty7wc4xjrno:xxw69U3McQYdVf8UNjm7w/o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17315cd02d28dfebc47c87c25939bc20_NeikiAnalytics.exe

Files

17315cd02d28dfebc47c87c25939bc20_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

gU'm#
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CV(cBd
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ