73a62c181db27985723963e7b51bbd810543e1a19ebb6cfd7449fb3bca555de0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73a62c181db27985723963e7b51bbd810543e1a19ebb6cfd7449fb3bca555de0_NeikiAnalytics.exe
Size

294KB
MD5

ec264ef12d17610944d7ef4a570a56d0
SHA1

e3a406b01b076d287446c10ec0a29f8745ccf839
SHA256

73a62c181db27985723963e7b51bbd810543e1a19ebb6cfd7449fb3bca555de0
SHA512

7e2c8f52fabd5bc53f2c1499d319c4cfec984c22320a4491819099415ae0ec1ca5f5538e70b6c224b826f10e4f7dc2456dddedd95ff2dc6228d5ac7bd56bdca4
SSDEEP

6144:oUmEEVTi6W/8LMcMhrJ0f7PHFRUsr/hVCr:oUZxSwNmf7PHFRUsrpVy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73a62c181db27985723963e7b51bbd810543e1a19ebb6cfd7449fb3bca555de0_NeikiAnalytics.exe

Files

73a62c181db27985723963e7b51bbd810543e1a19ebb6cfd7449fb3bca555de0_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\jenkins\workspace\cTraderDesktopBuild@4\cTrader\cTrader.Console.Infrastructure\obj\Release\net6.0\cTrader.Console.Infrastructure.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ