1325610831b6cc3ecd984439d7fc0e60_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

1325610831b6cc3ecd984439d7fc0e60_NeikiAnalytics.exe
Size

391KB
MD5

1325610831b6cc3ecd984439d7fc0e60
SHA1

7acb113a06b2eb28dd0a4c0df2fd68eb40b387bc
SHA256

a08e813d4c67e25918d36b285833faa4140ebde880dd66eb3b369a239f69c085
SHA512

fd009cef4f0323fac5dc9aeb4d8bfb6f346aabc49f93ac9c6e0c3f4e8d515155fbc1550084278084bab84078466b15a017af7d5f5c4ee81cf4bf7d2c9d51134a
SSDEEP

6144:6N3hW75RtOwQjnzLMBW6RC7svbx5QWxp8+fPcxOfu:GhW/aDsO9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1325610831b6cc3ecd984439d7fc0e60_NeikiAnalytics.exe

Files

1325610831b6cc3ecd984439d7fc0e60_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/src/DbExtract/obj/Release/net48/IbaDbExtract.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ