c39922445916b65efbbf6142b4cb52f0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c39922445916b65efbbf6142b4cb52f0_NeikiAnalytics.exe
Size

1.8MB
MD5

c39922445916b65efbbf6142b4cb52f0
SHA1

bbc3e2bf4a40dd5b58770580eaa4478b262f75b2
SHA256

d4e3884804315180ddc5e79a5c327dab1b14caab2e49025a869981485407375a
SHA512

adfd22a7342b6e91bc46245fbc74fbd3d6631ac3326a48459ff9cc828dbde2829106b6f8e94be97a8719728e73842027cc21eef60f41b5cfc936685ba3ae4d7e
SSDEEP

49152:WSmxTpcWl36ycbZ1T6bZ1To6Il3pc5T6yko6:IlZl3GbX6bX4l3YW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c39922445916b65efbbf6142b4cb52f0_NeikiAnalytics.exe

Files

c39922445916b65efbbf6142b4cb52f0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\POC\Trunk_Stable\POC.NET\POCShell\TestJig\obj\x86\Debug\TestJig.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ