0f488d87e4f5f7909fa498051510ff20_NeikiAnalytics | Triage

Sharing

General

Target

0f488d87e4f5f7909fa498051510ff20_NeikiAnalytics
Size

11KB
MD5

0f488d87e4f5f7909fa498051510ff20
SHA1

c02848b19166ea14efd6b03f6577214d466fc8f5
SHA256

50ebbead7c486549a930d84c191cd779b7821e14ff3c488d60679c21c1ad1f1c
SHA512

39b08ceda75221a002225c1ccabb0333ee04960d47c40cb9039c67d8a00dba8a54ec54e2a546c7db9b7f2c1f9c8706dbc7919ea4fdc3249fe07c317fe8fb37a2
SSDEEP

192:vqaIzEwQr4+ftsURcC2udhgGPL9AVQ0LrEOouLqLXW5MZgZPcrvLdCfWm:vqaIzEwQUAtq+gGPL9kQ0LrEnuLqLXWZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f488d87e4f5f7909fa498051510ff20_NeikiAnalytics

Files

0f488d87e4f5f7909fa498051510ff20_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\user\source\repos\WindowsFormsApp12\WindowsFormsApp12\obj\Debug\WindowsFormsApp12.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ