41ff37baa051a5f86d1ebbd713426d70_NeikiAnalytics | Triage

Sharing

General

Target

41ff37baa051a5f86d1ebbd713426d70_NeikiAnalytics
Size

20KB
MD5

41ff37baa051a5f86d1ebbd713426d70
SHA1

b5af058ef84d0579b108d83954f2e8f5b7ccf34e
SHA256

44deca6d11074d440705256067de4a3991dbee895f6c59239cdf8152c3603a17
SHA512

584c84525e534d897523e201c9b9adb8099aa9743322046c2ca403ce16b2e82949441c231ede4e3ca2db79ce3242e685b4867b236acf18b0eed4e76f41373314
SSDEEP

384:5oQ2i7AH6STJqEsnvR//VSsqpmuSNBFCNrY6RPyTGfznJKfsoV7fGW:5oQbS1ABmY0nEkog

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41ff37baa051a5f86d1ebbd713426d70_NeikiAnalytics

Files

41ff37baa051a5f86d1ebbd713426d70_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\hamma\source\repos\Savedrake v1.2.3\Savedrake v1.2.3\obj\Debug\Savedrake v1.2.3.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ