be95798da35dfb566c7865f695b72a10_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be95798da35dfb566c7865f695b72a10_NeikiAnalytics
Size

3.7MB
MD5

be95798da35dfb566c7865f695b72a10
SHA1

def2a05174b2378daeee8dbfb34a7bdbdee5c3f9
SHA256

577639f0476dd1d874c7f11ec85d910a80abd307aada9dcf784868b146fb4b1b
SHA512

47a8a9c2562f9ab9701e3ad171c84613f4e7c95f94be285ed70c3335f57cd3fda6d0d4ffd39a3f50b9def294368c7a9912562fb8efed0d945eb88f1778ca63c2
SSDEEP

98304:htc/iNuKEElj7Ssx6zXKJr9aEpaDwvVvtUD+yzOrf+AGUniav4XbbN:hq+LE4dxmoMWAwvNtmOBGPXPN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be95798da35dfb566c7865f695b72a10_NeikiAnalytics

Files

be95798da35dfb566c7865f695b72a10_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\anyadmin\Documents\anydesk\release\app-32\win_loader\AnyDesk.pdb

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: - Virtual size: 12.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 766B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dummy
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_MEM_READ

.custom
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_MEM_READ