5420f2ac82c4bd4e7ca31f248650c4e00800f5c8088616ecafb3c6385147d2b6_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5420f2ac82c4bd4e7ca31f248650c4e00800f5c8088616ecafb3c6385147d2b6_NeikiAnalytics.exe
Size

1.6MB
MD5

8a4609468dca2c62452ee08e91da4d90
SHA1

a7d9c3262e754a144616d166a4d727aecbd92097
SHA256

5420f2ac82c4bd4e7ca31f248650c4e00800f5c8088616ecafb3c6385147d2b6
SHA512

b3643f5a9033c9cc96e4b4e10a63cedb9eb308e3898066a8ef5ee3301c03e6a30800a99c0193e9b534834f5c16143ea0c5fa9038f0dbfd55a40fa63c89caeebb
SSDEEP

12288:k3QRPSn1viFwzPVhTcOOlS41lxiCewzDVhTU:kARPgKwLAO01lxiCewXg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5420f2ac82c4bd4e7ca31f248650c4e00800f5c8088616ecafb3c6385147d2b6_NeikiAnalytics.exe

Files

5420f2ac82c4bd4e7ca31f248650c4e00800f5c8088616ecafb3c6385147d2b6_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\hu hu _RSDK.CI\SVNCheckoutSpeechTaurus2016-05\SpeechTaurus\RSDK.Apps\RSDKCursor\obj\Release.obfuscated\RC.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 979KB - Virtual size: 979KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 647KB - Virtual size: 647KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ