212abe32974274e2b8f053b68b1362627718a739c8c0f752f4a45e965e71b698_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

212abe32974274e2b8f053b68b1362627718a739c8c0f752f4a45e965e71b698_NeikiAnalytics.exe
Size

1.2MB
MD5

f15a5cf504ee159c04b3fd4d67cd9ff0
SHA1

55188d1c5fc26277422d7ed07195a36bc55338d8
SHA256

212abe32974274e2b8f053b68b1362627718a739c8c0f752f4a45e965e71b698
SHA512

5dc8efb59aa2cb95d4c063ffe58f92ae3252ed138b06f8bc4ab3dcb5fd6633cafbe3d34d463d0eddfc12981e363f5b55a2a65c3f55445e83bb07aa750c8560c5
SSDEEP

12288:iSaSexYWtMJTlebin2CE6B6whgA9MFx1b4mLbzJk7ZkF6h+YZkF6hcR:sSexYJ+i7E6/hg3FtbzS9kgrkg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
212abe32974274e2b8f053b68b1362627718a739c8c0f752f4a45e965e71b698_NeikiAnalytics.exe

Files

212abe32974274e2b8f053b68b1362627718a739c8c0f752f4a45e965e71b698_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Working_Dir\Ropatec\Moog.DriveManager\Moog.DriveManager\obj\x86\Debug\Moog.DriveManager.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 897KB - Virtual size: 896KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 309KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ