00142097b2d3e67348e40a75e51bc190_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00142097b2d3e67348e40a75e51bc190_NeikiAnalytics.exe
Size

15KB
MD5

00142097b2d3e67348e40a75e51bc190
SHA1

a67ec670b7887d49ded995b26bf13b09d5fcf331
SHA256

ae8c43da84812838576cb9bfa23675d371030def1f9632cb4675263cf0fed809
SHA512

12baf6f201b0a4a06af883a41ed55d17ef1fb9d103f677f5d69ecb79e35a73a252021d56c03715eb29530e711c21ff26465883eb68743e3701eb016354c29d45
SSDEEP

192:5RKkLNIOifoh0Pjcim225aAhqgbAggvaezbc034FV3RUsbxdr5o9h3ws4OfDx3d:5RKqOOhT/zgpzbriV3RUSrCgsrfDx3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00142097b2d3e67348e40a75e51bc190_NeikiAnalytics.exe

Files

00142097b2d3e67348e40a75e51bc190_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\ZXing.Net\Clients\OpenCVDemo\obj\x86\Release\OpenCVDemo.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ