8459ccdb66547381ccd6c05d997cf3c942f53fa210dd8792e0c43a9914d78d19_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8459ccdb66547381ccd6c05d997cf3c942f53fa210dd8792e0c43a9914d78d19_NeikiAnalytics.exe
Size

15KB
MD5

f1f82152d0a9802a51f162ce1de3bda0
SHA1

dc6e4a34216de53f0a14087612856bc208dddbf8
SHA256

8459ccdb66547381ccd6c05d997cf3c942f53fa210dd8792e0c43a9914d78d19
SHA512

b8de612248e2243797e3ce42581780ae04cdfb7f3fa1da94cb272b8c1f5288244a2be9be951530214065753701b8f2003b11dc248cdd875611f6d1189874d031
SSDEEP

384:qo1DdKEf5En5j7EyBkN4l8YQReIpxlUfU:qo1jEnx7BK4LIpxlO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8459ccdb66547381ccd6c05d997cf3c942f53fa210dd8792e0c43a9914d78d19_NeikiAnalytics.exe

Files

8459ccdb66547381ccd6c05d997cf3c942f53fa210dd8792e0c43a9914d78d19_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\rankor777\Documents\Visual Studio 2012\Projects\OLikeBot\OLikeBot\obj\Release\OLikeBot.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ