c46fa769ad813d6b705a72b952977740_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

c46fa769ad813d6b705a72b952977740_NeikiAnalytics.exe
Size

828KB
MD5

c46fa769ad813d6b705a72b952977740
SHA1

33afb4d36a800105bf45c4fa8f3d08f0b312a027
SHA256

cfc0ae6d8c32332a3892a544ae3239fc3dd7d90dee49444acee32cfeb402b237
SHA512

0f35c097faf3409f738812d3b0160116049295a8d545d558fd689242da580a9056cd71e5855635bab8d77c09fca65737099006d5d6f78b5271b1186af256e18e
SSDEEP

12288:5vhD9yk0IrDLM5dtDXWBqj5fqEvbmwmCWYWcoFn30/sWHOq:DPM5DDYSfaS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c46fa769ad813d6b705a72b952977740_NeikiAnalytics.exe

Files

c46fa769ad813d6b705a72b952977740_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Administrator\AppData\Local\RemObjects Software\EBuild\Obj\F5071578DE6AF74B4C9747FA3FB7288BB93416F2\Release\Echoes\RemObjects.SDK.Server.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 826KB - Virtual size: 825KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ