367d811bf46759fabc811759349384d2e40e523882ad2063157097fa6b17d2d4_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

367d811bf46759fabc811759349384d2e40e523882ad2063157097fa6b17d2d4_NeikiAnalytics.exe
Size

891KB
MD5

c940af8273a12c8781d6373bd70347b0
SHA1

9a6d01e4888213bb2e845ecafd37fe3b5d138b9d
SHA256

367d811bf46759fabc811759349384d2e40e523882ad2063157097fa6b17d2d4
SHA512

d304c8ad1fbfb753068a743a084304d40f01a6fff4ac874d55e86c2c9a4072c173368d249098256efff8e66d304735c5cf068e539689657548e51c7321f050c3
SSDEEP

24576:HMK3tSw7kTPjHt6VutSw7kTPjHt6VeIw:sK9SNPzYWSNPzYhw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
367d811bf46759fabc811759349384d2e40e523882ad2063157097fa6b17d2d4_NeikiAnalytics.exe

Files

367d811bf46759fabc811759349384d2e40e523882ad2063157097fa6b17d2d4_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\SVN_Projler\Cezeri Soft (Guncel)\TesterSoft\obj\Debug\TesterSoft.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 874KB - Virtual size: 873KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ