57d5a09238d683e07f4c1b92548f1250_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57d5a09238d683e07f4c1b92548f1250_NeikiAnalytics.exe
Size

57KB
MD5

57d5a09238d683e07f4c1b92548f1250
SHA1

2425d0512e1bff5c99ef662f4652fa604366f9e0
SHA256

8dd53a473865afa098f65a8afeb2eaecbcf592972632db03f23e7f71e3a14397
SHA512

f34be31a15649af8b706b971f2ab4c19cc2a162bc695eed848ba9914c6762f0cea71d90698e948d8f69ed33af0c11476a1951de1977847f7ff65529632c9650d
SSDEEP

192:BwAZA/PoOCOlVsjP9aHqxWsNQUHn51RU3X6L:2f4OCOlV6sZsNQE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57d5a09238d683e07f4c1b92548f1250_NeikiAnalytics.exe

Files

57d5a09238d683e07f4c1b92548f1250_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Projects\ASCS_review\ASCS.Spreading\Source\SpreadingXmlUploader\obj\x86\Debug\SpreadingXmlUploader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ