34942d5d1346484ca4c35428319e5730_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34942d5d1346484ca4c35428319e5730_NeikiAnalytics.exe
Size

357KB
MD5

34942d5d1346484ca4c35428319e5730
SHA1

a17a65f529457e6b02b42d2a20887b5aacc90221
SHA256

614174c5173fe6a6c3182d1b1758ad5f69239f55595b238bafe8892a2009dd91
SHA512

84a86da02ce841ef3677e5863abb6ab029b86941003ed19a64c56da42c6a197e5d2b2e77be8eb9a68c24af664dc7d234e3c4ce5bd8b2fa7365b6382eb0b7df6a
SSDEEP

6144:8DOqCoaCrsumh1mhUcaXOmDOqCoaCrs2mhVmhD5:+OqPadOUOqPaq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34942d5d1346484ca4c35428319e5730_NeikiAnalytics.exe

Files

34942d5d1346484ca4c35428319e5730_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Tech\Desktop\A\VS 2012\C#\IES_AuraScript2\obj\x86\Release\IES_AuraScript.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ