562fa81cb9aa44b2d5f4be603fa6c69f37e1b824f9ea2475cf83d552376e4b6a_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

562fa81cb9aa44b2d5f4be603fa6c69f37e1b824f9ea2475cf83d552376e4b6a_NeikiAnalytics.exe
Size

15KB
MD5

a952a3039ec63ee70a8d08f695b39bb0
SHA1

b98157b23abd8bde200346b3ee3bd631991c26e2
SHA256

562fa81cb9aa44b2d5f4be603fa6c69f37e1b824f9ea2475cf83d552376e4b6a
SHA512

3bc05d0abc6aaad2eeb939b931885e9d3ecd19bccf1726783dea1e5f560e3ed45c5471e42815f9265cc988bf554bffdd28294532af5eaafc3400693779cd9f5f
SSDEEP

384:l2v+qsHg+qjSJfvtff4HHY3oLPL/gAn9Cq1/qxL4L3LCy2VSBNPi:8v+qsfsLDoWkqFEsbcVSBF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
562fa81cb9aa44b2d5f4be603fa6c69f37e1b824f9ea2475cf83d552376e4b6a_NeikiAnalytics.exe

Files

562fa81cb9aa44b2d5f4be603fa6c69f37e1b824f9ea2475cf83d552376e4b6a_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Windows 8.1 Gamer\Documents\Visual Studio 2013\Projects\WindowsFormsApplication2\WindowsFormsApplication2\obj\Debug\Tools Test Rikvip.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ