13cc11be240859708beaa90ee7999f574b9fe2b2954addb846ad8507af9adc46_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13cc11be240859708beaa90ee7999f574b9fe2b2954addb846ad8507af9adc46_NeikiAnalytics.exe
Size

129KB
MD5

f8328e89f03f6d3993d4ca099c7bb9b0
SHA1

23182027a74783156bb0a837ebe8097124d8296f
SHA256

13cc11be240859708beaa90ee7999f574b9fe2b2954addb846ad8507af9adc46
SHA512

86074c6312433dc7a24162b2aed3248ffadd2e9f9d178f00ef9b9b7ec2c8e57599a523658ee07d3b261a51a35a7904c90a9afa832045e3d8546ac0d5d9aad9db
SSDEEP

3072:9RkUXoMhgjdNroXfMspzkbDnHL9FoXIHQ9:EpjgUspzkbDnHL9FoXIw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13cc11be240859708beaa90ee7999f574b9fe2b2954addb846ad8507af9adc46_NeikiAnalytics.exe

Files

13cc11be240859708beaa90ee7999f574b9fe2b2954addb846ad8507af9adc46_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Easysoft\Desktop\EasyCloser\ESoft.EasyCloser.MISMO.Xml\obj\Release\ESoft.EasyCloser.MISMO.Xml.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ