775b17c7cce9046119d4e769f42fa740_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

775b17c7cce9046119d4e769f42fa740_NeikiAnalytics.exe
Size

11KB
MD5

775b17c7cce9046119d4e769f42fa740
SHA1

52d50973f268ae72272aa8245234243c4216a6ae
SHA256

b438bdd6fb903c877fe07b06f734ac2df2ee67ff54c33c3436d2a175bd7c90fe
SHA512

15b5683607e25b084db47a192945192835e052826962d323f0d5e8322811b81698ded88d7d8b0f363b4501acfbe0d1ec19bec90f09643c3894339f1c19dbc99f
SSDEEP

192:q7g06IN4q5DMih9btf5UIIWH1O8nl+ajKLiLgL9IeKpzsVl6LNL0WsYodtB5LPW2:Gf5dIr8Qa2LiLgL9HK97LNLbsYStBZWr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
775b17c7cce9046119d4e769f42fa740_NeikiAnalytics.exe

Files

775b17c7cce9046119d4e769f42fa740_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrator\桌面\WindowsFormsApplication6\WindowsFormsApplication6\obj\x86\Debug\WindowsFormsApplication6.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ