6cc3029800b88d7a166adc6f73309dd0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6cc3029800b88d7a166adc6f73309dd0_NeikiAnalytics
Size

323KB
MD5

6cc3029800b88d7a166adc6f73309dd0
SHA1

e3b99ea7a54452f860109cc74affb82981e35441
SHA256

dbc6b443fe9771fd7c4231f728b1c30a502dac78aa5cd6d0efd10177b1eb1e3c
SHA512

c6cbeb7b23cdae37536887a6c1272af38c9991edd1f98e25bebd05790ddec97a2152d13d7149c1352d78679dcaf64fbda1c14c5d8f8a8407a893fb79b4b022ba
SSDEEP

6144:wMzD5objM+X0t73x5vaw2P7IUtn5SKyeNLFN9KRzGwmxKZgggggggu/ggg/g/gTz:wMY7hHH+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6cc3029800b88d7a166adc6f73309dd0_NeikiAnalytics

Files

6cc3029800b88d7a166adc6f73309dd0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

F:\MU\WIN10\WindowsApp1\obj\Debug\WindowsApp1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 321KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ