171a0675b29e0f5fa310ac8894b7a40d0583f82f9b0c6e29622a8b6c9c35aae7_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

171a0675b29e0f5fa310ac8894b7a40d0583f82f9b0c6e29622a8b6c9c35aae7_NeikiAnalytics.exe
Size

4.1MB
MD5

59166bc20e3bcd6a322cadbc12182210
SHA1

cdcd3e24bf5a1d0c370e6497ee5c4e8e9a67f3cb
SHA256

171a0675b29e0f5fa310ac8894b7a40d0583f82f9b0c6e29622a8b6c9c35aae7
SHA512

8326d1e1f80688d94122316c9d8ca70ab3e9580ea98d2d14ab62223cb55884a319891ec08ca2eaf4b93863d1ccf87eb4d039f98e9f7f38f40b62ab5fca026747
SSDEEP

49152:6CqQnfQndytGGISwLXq+/wdVtRV33aX1JMc:4ygGXoXj/w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
171a0675b29e0f5fa310ac8894b7a40d0583f82f9b0c6e29622a8b6c9c35aae7_NeikiAnalytics.exe

Files

171a0675b29e0f5fa310ac8894b7a40d0583f82f9b0c6e29622a8b6c9c35aae7_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Code\AltV\WindowsApplicationClubs\obj\Debug\ClubsAppMyChemist.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ