69adead5896696da8ee522bc5fb4f210_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69adead5896696da8ee522bc5fb4f210_NeikiAnalytics.exe
Size

616KB
MD5

69adead5896696da8ee522bc5fb4f210
SHA1

7ee8018cfc481715e39f25c5bf0196412926c6ba
SHA256

e9a30ca590a5a271df32f05f2a2cd510d2384fa775eb5583386a36d9eaf69e98
SHA512

71778d3a157bfb96b898dba75fd4b08a3827ee8a7e5b6c7a749dca149eef333a54b273b941f2a2c47513cc1993961979a258b85cb31b5f4647b30175c9ccd35b
SSDEEP

6144:JIC+bKf6cxJSfFnwbTheH7YUZg0venJyyyyyyyyFLvLpGVIkRXNf+TQwnGd8bUBF:7+vsThTxDLjCIMgNGHi3H4z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69adead5896696da8ee522bc5fb4f210_NeikiAnalytics.exe

Files

69adead5896696da8ee522bc5fb4f210_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Windowa-APP\Radiowalla-App\Encryption Work\RadiowallaApp-17-2-19\mediaPlayer\obj\Debug\mediaPlayer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 582KB - Virtual size: 582KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ