2d0a8f170ff3bc477f0259b1563a3820_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d0a8f170ff3bc477f0259b1563a3820_NeikiAnalytics
Size

429KB
MD5

2d0a8f170ff3bc477f0259b1563a3820
SHA1

0a327fb17351a0cd27eb4b7b1af909c8dd5c8596
SHA256

2a9dd75571b91468bc4d6e66cbd14b975a86bc68225b597e5d499d49b928d36e
SHA512

d6fe2780b0ff6f31c55562f399581230451218e0415b886fc9e0b0dedd8ddcda6823a347af12203ee50d8dff58715925a361903d741c4f655a97bae13f5e7085
SSDEEP

12288:aTwVnM6kb0pKGGGGGEKIpl0GI0oBBvypKhINdmMIZT:a/dKumMI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d0a8f170ff3bc477f0259b1563a3820_NeikiAnalytics

Files

2d0a8f170ff3bc477f0259b1563a3820_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\User\source\repos\Trade\TradeFrontEnd\obj\Release\TradeFrontEnd.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 426KB - Virtual size: 426KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ