4c645f3c4df76ba2dd0898058ae4c810_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

4c645f3c4df76ba2dd0898058ae4c810_NeikiAnalytics.exe
Size

866KB
MD5

4c645f3c4df76ba2dd0898058ae4c810
SHA1

84f182d1b4cc87e2eab859d2fa7f1c02996c8acc
SHA256

0d2f976d6fde660b807ad3fb07e4cbdb307482ebae62a005238965aae240a073
SHA512

5eafa7571189e6c160542d73039018e6c1387cd2ab656fe977d9645a7831dd80e01f44f3c488b5b81923ca50c93f0754b55fc525ed7846c86eeddd0d193033aa
SSDEEP

12288:jVxjvP1B53x702GqXX7SakQ0vQu7mOWDz3uWLMAczzeBUmZFVjI9O+1ykjTmzo:XjvNB53xgOH3kQjaeo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c645f3c4df76ba2dd0898058ae4c810_NeikiAnalytics.exe

Files

4c645f3c4df76ba2dd0898058ae4c810_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\MWalton\Documents\Visual Studio 2015\Projects\Adage_Bloomberg_Import\Adage_Bloomberg_Import\obj\Debug\Adage_Bloomberg_Import.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 863KB - Virtual size: 862KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ