1ea95f236ba8a4120c89ba7de84e8e00_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ea95f236ba8a4120c89ba7de84e8e00_NeikiAnalytics
Size

4KB
MD5

1ea95f236ba8a4120c89ba7de84e8e00
SHA1

8df7160477b2efad8d2535006f255f073b9ee261
SHA256

93be3ab87b633a4c00879be3207bd987d44c96d6d82e7f798496f4866b29d4c9
SHA512

045700ef515782259970db2dbd08db3eb51d7bf25802985b7af2cbc3a8a6808d589d6f25481fcb80c6af67eadf0f5e88d1f6680a676542c760339afe7f8fe7ec
SSDEEP

48:6N+lwmsU27FN2ahsrtoaD1HsI1drzpF6vul0Rxy4NHlrnq7Oqyp5qaqnq4HqtBdB:XS7FN2qsZoaT1Zzp+uaQ4NFTq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ea95f236ba8a4120c89ba7de84e8e00_NeikiAnalytics

Files

1ea95f236ba8a4120c89ba7de84e8e00_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\jenkins\workspace\CooperBotf4ab4c7c\Core\Kaseya.UriBuilderExtension\obj\Release\netcoreapp3.1\Kaseya.UriBuilderExtension.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ