07492affe7d56835c5d0cc41553dd1e0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07492affe7d56835c5d0cc41553dd1e0_NeikiAnalytics
Size

91KB
MD5

07492affe7d56835c5d0cc41553dd1e0
SHA1

9bf93017c6c0694fdabf56fc14c5c721747f9bd4
SHA256

c458818f8b0d48919643d362d289a3ca060aae989c3d0cad93d34ab6fabded51
SHA512

019ac15ed8b9f9414e4bd73b2fe6fc07204183dee6af6477dc9712c25dbb7e7ed61bd35ea4a51db2a8d77ddba79630582ec0d304a7cf56d6b4549a9f583d73dd
SSDEEP

1536:Vk8RYGnWe+zzMMKKWkHc9+RDH0S0PxPOitvGsmiNIc5VxQB/2Qn:Vk8RRWLMM/VHc9+RDlM/vGsmAxW/F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07492affe7d56835c5d0cc41553dd1e0_NeikiAnalytics

Files

07492affe7d56835c5d0cc41553dd1e0_NeikiAnalytics
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\eric\dev\SQLitePCL.raw\src\SQLitePCLRaw.core\obj\Release\netstandard2.0\SQLitePCLRaw.core.pdb

Sections

.text
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ