3a93948f8318defd1aadce486efac41699a210c8f917f47ee8895a7b30e481ca_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

3a93948f8318defd1aadce486efac41699a210c8f917f47ee8895a7b30e481ca_NeikiAnalytics.exe
Size

1.3MB
MD5

9a826771dc5df2ac62d95ff618844e00
SHA1

5e0daed2cfe2b4dcd203ff3c1a695d142f27cbd3
SHA256

3a93948f8318defd1aadce486efac41699a210c8f917f47ee8895a7b30e481ca
SHA512

b70a7f65734a33e907595ac8565e3691a9ccdc37ec578fb9ab2abdf8cecf8c54bb5b8f4b3bb1417a40d4b0ee8d54168a7d890c9a3f1f1154d5f8206310c9e550
SSDEEP

24576:LEzDjkkyGwxljkh06KJz4U0MB+uP9z19Uuvxzzxi2Gh1sroEzDjkky:IUBnwyJH5P94axvxEH2U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a93948f8318defd1aadce486efac41699a210c8f917f47ee8895a7b30e481ca_NeikiAnalytics.exe

Files

3a93948f8318defd1aadce486efac41699a210c8f917f47ee8895a7b30e481ca_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\139469TV00501\source\repos\PHOTOPRESS\obj\Release\PHOTOPRESS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 262KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ