4ff68c5c694f7b9dbeb5866661bd59f181bcc0db5b72eb406e6a5941523c8d93_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ff68c5c694f7b9dbeb5866661bd59f181bcc0db5b72eb406e6a5941523c8d93_NeikiAnalytics.exe
Size

468KB
MD5

6f1d3d59e4065998f0dc19ceac4d9070
SHA1

1196fd4b7a2d0ac0c0f36f49176e6c386fb6cf3d
SHA256

4ff68c5c694f7b9dbeb5866661bd59f181bcc0db5b72eb406e6a5941523c8d93
SHA512

77a2f2633ba142b70a254bac726820bfd67010352c1b0288f4fdac07339edbe26b389c330d61a8c2ddb29f66e8f1f9676042d45bb0f705d6738336bf727499ce
SSDEEP

6144:+AdNcOLgQhVYz7LkAmAAdKVG/Jdw+y6mSvqDpFSpFJI07LEFEIlVatUe44fTz9C7:+IVYz7LkAmAjZpFSpF5LyfpmG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ff68c5c694f7b9dbeb5866661bd59f181bcc0db5b72eb406e6a5941523c8d93_NeikiAnalytics.exe

Files

4ff68c5c694f7b9dbeb5866661bd59f181bcc0db5b72eb406e6a5941523c8d93_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Buildserver\Perforce\depot\Common\Framework\3.0\Articulate.Audio\obj\x86\Debug\Articulate.Audio.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 456KB - Virtual size: 455KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ