76c33db222cee89fd61e2ad881b81890_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76c33db222cee89fd61e2ad881b81890_NeikiAnalytics.exe
Size

26KB
MD5

76c33db222cee89fd61e2ad881b81890
SHA1

b630db0c4458c9a973bb7dbe5228d55da7f973d6
SHA256

958857b5973e538e72faf3a7aa84314f9eb3e66b8fd87bc8320df3eb3c960552
SHA512

85f2719753e7f5162535d28368b77f31160885891e4cf5ff1ef63ecc38205185e49399b684245f9f1d9df4dadb16a99bc9494af0031a30feb2188e32d54dcc61
SSDEEP

384:MTZbToYH+ipTedfaXjpLjoGr2ZjrsyInTGMa3kiazRjz67s5Wsc4LW4:MTZbTos+ipTegBqjq1nBLx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76c33db222cee89fd61e2ad881b81890_NeikiAnalytics.exe

Files

76c33db222cee89fd61e2ad881b81890_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\gwilliams\Documents\GitHub\Order-Express-2\FileTranslation\obj\Debug\FileTranslation.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ