90815aa8a34192a91e16d1939b103c80e19f5978bd4547d93e4f95205f06cce9_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

90815aa8a34192a91e16d1939b103c80e19f5978bd4547d93e4f95205f06cce9_NeikiAnalytics.exe
Size

8KB
MD5

5c4afb6a15b7a0cab3152d3e7e0c3800
SHA1

773f513f8589792427503effd07ac67262d71b79
SHA256

90815aa8a34192a91e16d1939b103c80e19f5978bd4547d93e4f95205f06cce9
SHA512

cdc6ee1bef5629641a12333af62b3d5969fdc0014338e408fac91b4b6ca1f772542364a8a09ae4e93d74416663419240e41faf3b79491c2056179649331f31f1
SSDEEP

192:ll0VGmWSZlq+11fSvMcP9XI9yIBPzh2M:/QVJqOqvMcP9XmJRh2M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90815aa8a34192a91e16d1939b103c80e19f5978bd4547d93e4f95205f06cce9_NeikiAnalytics.exe

Files

90815aa8a34192a91e16d1939b103c80e19f5978bd4547d93e4f95205f06cce9_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\SVN\release-2013-07-17\src\ERP\GY.Products.ERP.TaoBaoRobot\obj\Release\GY.Products.ERP.TaoBaoRobot.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ