506421e4720951fdf53260de6f35e790_NeikiAnalytics | Triage

Sharing

General

Target

506421e4720951fdf53260de6f35e790_NeikiAnalytics
Size

223KB
MD5

506421e4720951fdf53260de6f35e790
SHA1

99e875d3e420a0e49749c3d126ee72f3540add55
SHA256

dfc4f45517d5ca8614e629f4187c7477ce0f73606db95609458a3f3d1a00b460
SHA512

771fcc7a3d03e48ca494d121f6f24dcefb5bc08c989e8dd16957bc08b56b7f449729f58ca63b6b9752f157cf8fe97006240217ce71c290a83ef0cf254df614ab
SSDEEP

3072:TfuyY3BpgMd33RpjuY6kwXNzszNUmPcWZjwFwkOHvnFqf3iYFuOLff4fAzLa1dBI:yByavuY7wXxqXaOHcf14fGLa1dBsR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
506421e4720951fdf53260de6f35e790_NeikiAnalytics

Files

506421e4720951fdf53260de6f35e790_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\itan_\Desktop\WinFormsApp1\WinFormsApp1\obj\Debug\net8.0-windows\WinFormsApp1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ