86e5b7e69c2005aaa40d0061c0b59f30_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86e5b7e69c2005aaa40d0061c0b59f30_NeikiAnalytics
Size

8KB
MD5

86e5b7e69c2005aaa40d0061c0b59f30
SHA1

b10be0d04e43aa5450a7ce1dbfcf2c2aac31b3ef
SHA256

a4cdbfe964b79711f2627dc6bd7cb4faebbd6eee17942b46dc1965ab8ed1d9bd
SHA512

bb2bbce88984c16d37344c0c552a2786ee8a8caac9eade3ffb3bccceb8304d9863e5d183b43f731752f288964f4d14adfb49d59132d14a7baee88157fad4a344
SSDEEP

96:0qxuhYJZ4SYLTBdJYa3EJ2fakdoHWBxjC00x/ep/11yTyXDDPdWVgCrC:0QJOdHJYaQ6aZHKxe3TyXPdq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86e5b7e69c2005aaa40d0061c0b59f30_NeikiAnalytics

Files

86e5b7e69c2005aaa40d0061c0b59f30_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Admin\Desktop\PowershellStarter-master\PowershellStarter\obj\Release\PowershellStarter.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ