11b71c4646f56cc8576320a41c9e4810_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11b71c4646f56cc8576320a41c9e4810_NeikiAnalytics
Size

1.2MB
MD5

11b71c4646f56cc8576320a41c9e4810
SHA1

713cbdf15f3f0476fc445afa71dcff0799317c26
SHA256

64de417c8fb7c90ec49830effa028ec6cd513d0f8c55d75a34be93e5a9cc8f83
SHA512

172505ac5730cb476b6e4217d5359bfec586a96a26906f117263a03d3543309e887ac834fdac2c6e973829621712c8eb2e79ebf2195c360cb5a2750f81f2fccd
SSDEEP

24576:z/3Bs2MrQRRg+8Dqiglx7vlibsV5KDlM13GPZ:NZhRRg+P3lxblib+5a83GP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11b71c4646f56cc8576320a41c9e4810_NeikiAnalytics

Files

11b71c4646f56cc8576320a41c9e4810_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Public\Source\Build\EasyNXConnect.Invoice\Applications\InvoiceViewer\obj\Release\EasyNXConnect.InvoiceViewer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ