26b4807204c4569d65bc3e62100b8445b467c93ba4f4eddb9d590acf5da10312_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26b4807204c4569d65bc3e62100b8445b467c93ba4f4eddb9d590acf5da10312_NeikiAnalytics.exe
Size

2.3MB
MD5

ef58a215a56712c0a300f9d517ff91d0
SHA1

a3fbffb6d47068927893ea12304aa1eb7c641f25
SHA256

26b4807204c4569d65bc3e62100b8445b467c93ba4f4eddb9d590acf5da10312
SHA512

4772a15a9e6b3512cace9867a7d3613bab4c1135dcd56881b4feb20f9445b004c82a0b9ec914bb28be0e91abab42820ed62f9c592383cbe59e2d77354923c023
SSDEEP

12288:zYSIW4FcYXTLuN+/ntiBTBABRBvYsF4NGeJZByjjzDsF4NGeJZByjjztcbI:ycrYtYlaXgs+JZgfDs+JZgftcM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26b4807204c4569d65bc3e62100b8445b467c93ba4f4eddb9d590acf5da10312_NeikiAnalytics.exe

Files

26b4807204c4569d65bc3e62100b8445b467c93ba4f4eddb9d590acf5da10312_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\hkennedy\Documents\Visual Studio 2013\Projects\CommaChameleon_4\CommaChameleon\obj\x86\Debug\CommaChameleon.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 364KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ