dabf5af3a2804ccc5af30f6f1108d6b0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dabf5af3a2804ccc5af30f6f1108d6b0_NeikiAnalytics
Size

8KB
MD5

dabf5af3a2804ccc5af30f6f1108d6b0
SHA1

45fa15594a08db802d4a44f3d58f996154a2a2e0
SHA256

75507b0252294b410f3c6019e518045cd8360e1298f5b5832ebe24fbaf9b1bd9
SHA512

c4097939e4b1117efe3edeaf5322450557a792332ca31757e6ec4d856499296226c04b1b1e6e8e00db925c2b148fa12d06048da1953e4004e43bda785aaf1318
SSDEEP

192:fEuLymoFnfS1RvGLLMLeLlI202BpZhLLLiezM6C3nvTea:cuLymoFnfgBSLMLeLlLdHXLLLPzMxvTe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dabf5af3a2804ccc5af30f6f1108d6b0_NeikiAnalytics

Files

dabf5af3a2804ccc5af30f6f1108d6b0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\documents\visual studio 2010\projects\WindowsFormsApplication4\WindowsFormsApplication4\obj\x86\Debug\WindowsFormsApplication4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ