26666e71606a01641614068f7395ad50_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26666e71606a01641614068f7395ad50_NeikiAnalytics
Size

222KB
MD5

26666e71606a01641614068f7395ad50
SHA1

edee80281d5b940b8e0a247af75b3ba75d85c2b0
SHA256

9011d72e3a4f5d7c43e4199199324c6c11e8fc2af933732307a7a320f72f2a85
SHA512

9edef3a27f5ab4114c35372ff49e73e2d144448d83c7e85a56695adc1c2dda91b3ab7a798821c4e2d8b6bd4a178cb88ed203e5351742f3498c6e7d333e18b165
SSDEEP

6144:gpf8000000/QEYF7g3yyuGpMFFUppppOpfC+:gpf8000000/QEYF7gsFF/pf7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26666e71606a01641614068f7395ad50_NeikiAnalytics

Files

26666e71606a01641614068f7395ad50_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Emulatorok\Aion\Aion Program\_Launcher_Source\AionLaunch\obj\Debug\rWorldLauncher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ