172bbe98a16346c43c65de6c6f64d6548ed50afb50dd510b902a615c6028b800_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

172bbe98a16346c43c65de6c6f64d6548ed50afb50dd510b902a615c6028b800_NeikiAnalytics.exe
Size

49KB
MD5

1cd93acff17bf680287925dca7c88150
SHA1

d85b5ad7ae5fd3ff0d10bf92f356ff7293f4d321
SHA256

172bbe98a16346c43c65de6c6f64d6548ed50afb50dd510b902a615c6028b800
SHA512

c1b8107bd36169aded6ab9ca225e4f7ed8fb6bcb4bd171fa409815cb4bb76cb1ad2168ca577494e4adedccec1c930592c7ca0439f8d58827b85888d30742e85d
SSDEEP

384:oTFkrp0kWvkO7evNM0d/BD6gA1lkjgiSOiBtDH1LFeX6fLXHV8KtBt1HBOdfYCzV:oqGFzPcgxxtDHtMXadBt1wk8871NkX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
172bbe98a16346c43c65de6c6f64d6548ed50afb50dd510b902a615c6028b800_NeikiAnalytics.exe

Files

172bbe98a16346c43c65de6c6f64d6548ed50afb50dd510b902a615c6028b800_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Working Folder\VS-2013\prjCallJCLbyParm\obj\Release\prjCallJCLbyParm.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ