417a79dde5280a91b91d3723fda3cae0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

417a79dde5280a91b91d3723fda3cae0_NeikiAnalytics.exe
Size

619KB
MD5

417a79dde5280a91b91d3723fda3cae0
SHA1

92b762be6ab4459ee2907e3dd98627bba6f575ac
SHA256

643abf3b5b8e9d9778f5ef31ca3b2b259d3ca2b989009b7473fcd2a7a56a3f55
SHA512

23495b5820bf866e6f1b4c88a133f3222f21916c21f8ecc4475261dad838d0a4fa602917978f13c3b2c1971e37ecd48c9692e2cf52aeb8841eb2c9f45fc8b526
SSDEEP

12288:aVLiGSFnBsx8d5A9Qn9iIqBqoZScWwW+o9j8q4AuWC9W8Ign9t3pcHkJNyAyj30F:WOB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
417a79dde5280a91b91d3723fda3cae0_NeikiAnalytics.exe

Files

417a79dde5280a91b91d3723fda3cae0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Shartbutcraft.Client.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 612KB - Virtual size: 611KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ