6866a91f093b141dd069a750de3f6b70_NeikiAnalytics | Triage

Sharing

General

Target

6866a91f093b141dd069a750de3f6b70_NeikiAnalytics
Size

44KB
MD5

6866a91f093b141dd069a750de3f6b70
SHA1

9f296ea25afcc1ed5005e9cf7ee9b20f7a57df67
SHA256

5616a809f8b36fdbfa47e35bad26053af592c92254d388ba8c2950410c59d7ce
SHA512

1f9f1b1fd42a1b08f1fbed724d08bf4bcdcb75b12b8def757a8bb1e06a089e242ef3a8cf2103edf1528948925349e5940ed6dd137d737068d45d2ad5ffd1f377
SSDEEP

768:9x+kL+W392KwbG3S8gUtYcFA/Vc6KJcQqCPtspPxWEJ+Z+cQqCPtJGPxWEJN:9x7SGwbGC8gI8VclTqUtoPxmAqUtJGPx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6866a91f093b141dd069a750de3f6b70_NeikiAnalytics

Files

6866a91f093b141dd069a750de3f6b70_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\rsStubActivator\rsStubActivator\rsStubActivator\obj\Release\net462\rsStubActivator.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ