46fd1f1b3c5341accdd8c41be6959db6cb61bacc8b29e7af538da50741e8c8be_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46fd1f1b3c5341accdd8c41be6959db6cb61bacc8b29e7af538da50741e8c8be_NeikiAnalytics.exe
Size

457KB
MD5

24de437a4585d60cb0cbaf1ad2cd94c0
SHA1

20b37492e125ed279ce9f3f14494d184b8d39075
SHA256

46fd1f1b3c5341accdd8c41be6959db6cb61bacc8b29e7af538da50741e8c8be
SHA512

004de93d9093e1fbf038a8565dfca738ab8750a8a7a35af35865d9e706fe3b38a0207bd647a37be34efc1c5b6c939c298b520d8b9dc57e2d89bf7e0f4267d6a3
SSDEEP

6144:t3q9wxATIhzeVi2+amCbWd8aoPSPZBrg8GZD5bZzMEvkWUh+iHSvyfOlQtRpp:txeVi2+kWK3PSPHrg8mtbeGiHwQtRp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46fd1f1b3c5341accdd8c41be6959db6cb61bacc8b29e7af538da50741e8c8be_NeikiAnalytics.exe

Files

46fd1f1b3c5341accdd8c41be6959db6cb61bacc8b29e7af538da50741e8c8be_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Builds\8\Team1\BuildSource-8.8\Sources\CCCom.Inventory\CCCom.Inventory.Business\obj\Debug\CCCom.Inventory.Business.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 455KB - Virtual size: 455KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ