0029dcb9dcb7a29161b6e050da60e000_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0029dcb9dcb7a29161b6e050da60e000_NeikiAnalytics.exe
Size

292KB
MD5

0029dcb9dcb7a29161b6e050da60e000
SHA1

67c628cf5ea58e49b4bc732b160d91dcd0e18b09
SHA256

46a6546225b7f7738e7094309c50b8438e472f18b1fb8e9622d84ee1a463e0bc
SHA512

0956a340a10ed3c76d742cb25226260c951249cf993336152e8af3fb675fb03a6e4098effd472eb16e6d64a41503be6e3628906435163c2816446c5957ba3a55
SSDEEP

6144:yWpitPsgPBAx59E6oY/wrMxXy9ug5k59bJmATC9zgA:nEdPBekKw2RfTqg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0029dcb9dcb7a29161b6e050da60e000_NeikiAnalytics.exe

Files

0029dcb9dcb7a29161b6e050da60e000_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\CSharp\Wsrz.Qyd\Wsrz.Qyd.MainFrame\obj\Debug\Wsrz.Qyd.MainFrame.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ