774bee0a429e7362f003a95c5d494c2578eabbf6206f6f0d8c680277de28a59a_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

774bee0a429e7362f003a95c5d494c2578eabbf6206f6f0d8c680277de28a59a_NeikiAnalytics.exe
Size

20KB
MD5

69e43874d9b8f63dea6d9c632e9110d0
SHA1

005890792f76e0c08bd3d74eab2ae83e5623a32f
SHA256

774bee0a429e7362f003a95c5d494c2578eabbf6206f6f0d8c680277de28a59a
SHA512

3a638068893d6f88781cc1a203cafa0a8622634655c77df78474d4417d9a7e8039add20c242f4f8838553860dfcf806506fd569c2b9ca46bd20dae2b7cc565ff
SSDEEP

96:4aTBk0gfbQNt8Ov7NIYfAlFKyHrv9EA1+OfGKojPd0jgjptcpdqA+xqxtKj:4FXfMrX7NImAnfrl28ob6ApLqxE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
774bee0a429e7362f003a95c5d494c2578eabbf6206f6f0d8c680277de28a59a_NeikiAnalytics.exe

Files

774bee0a429e7362f003a95c5d494c2578eabbf6206f6f0d8c680277de28a59a_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\TravelInsurance\Release V1.1\BaseVersion\SourceCode\Encrypt\obj\Debug\Security.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ