69d4f3792db347e85d68a3cc71fcb6f0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69d4f3792db347e85d68a3cc71fcb6f0_NeikiAnalytics
Size

74KB
MD5

69d4f3792db347e85d68a3cc71fcb6f0
SHA1

6c30c8e4e3da7cd7fa0ac6e214ec4f40fa48cbde
SHA256

0d3c5041960220b39ff64934edce7b322856abdacce6b1a1f5b58703e41ad3e5
SHA512

d0d2c037831909cf9adf468d0a18789f4130fa05afad654ebce74454c45e6b59a3102ddc62af8715cdf030f5f82ced1e16d807a75c34160012de803a282eb55a
SSDEEP

1536:ar+3XinWbcRlK86cl5EEHawIHBPTn422b4HuwIAz3j9wn2+0NWe7O247cE6xxo5H:ar+3XinWq0M5dHawIHBPTn422b4HuwI3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69d4f3792db347e85d68a3cc71fcb6f0_NeikiAnalytics

Files

69d4f3792db347e85d68a3cc71fcb6f0_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

H:\Deva004\Issue3.x\Software3264\Apps\utils\DevaLoggingApplication\Release\DevaLoggingApplication.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ