89773255d8f1c066fd4970d10b4f9400_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89773255d8f1c066fd4970d10b4f9400_NeikiAnalytics
Size

82KB
MD5

89773255d8f1c066fd4970d10b4f9400
SHA1

d10e21175871da049a4817b292272ca22a4b3420
SHA256

def240dc72bc3c9859e7ca191b105591422863f66b3d5c78e9a073d373c10864
SHA512

ef43c3dd3d7e283c0335f12f93625f89f210f7a2ca1c10647b6b0832aa91031a571a6a00fff0b670d53c40041b810fa747eb2dc3cb390b7452c491f07fc3aa53
SSDEEP

1536:s+ft/qzIdlVMszvHugSxIOfjhrEtU3yCVoi3QkrE7o6nlyG69+:s4tizIT5vHugSLf+GLoiuUl+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89773255d8f1c066fd4970d10b4f9400_NeikiAnalytics

Files

89773255d8f1c066fd4970d10b4f9400_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\basroq\workspace\RSMinerve_publish\RSMinerve.Modules.Selection\obj\Debug\RSMinerve.Modules.Selection.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ