419cc0e40e954960a6dc7585d9c99b10_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

419cc0e40e954960a6dc7585d9c99b10_NeikiAnalytics.exe
Size

40KB
MD5

419cc0e40e954960a6dc7585d9c99b10
SHA1

72f33ede885672565663a47387081fdd867879b8
SHA256

c9954e140b361186033aae619eecf7ea684113776228d7b146c6bc459fe269f7
SHA512

3ba238dcd96d918f15efaceb9ef0e1a6485ca14daa58b2a1b10d1b7a4fe739a2ae0da866fc508fad7bcb29990fa91ce6634170f45a6367f0419673414a502265
SSDEEP

768:xAyt6CV+6Qe/Xe/e5nLTu2Qhw6sATSjbEdwAYvLFJXZTR:xAyt6yQmwquzsedwHvHZTR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
419cc0e40e954960a6dc7585d9c99b10_NeikiAnalytics.exe

Files

419cc0e40e954960a6dc7585d9c99b10_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Watercloset\documents\visual studio 2010\Projects\ROL\ROL\ROL\obj\x86\Debug\ROL.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ