631f75a954caac8bb04fd7d353b6ac60_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

631f75a954caac8bb04fd7d353b6ac60_NeikiAnalytics
Size

20KB
MD5

631f75a954caac8bb04fd7d353b6ac60
SHA1

5fa745cce458bcb247b34a6e8e865bfffb7b8a64
SHA256

a448e3a02091c65d2b69bbd004758f89ea6416d5cd52c48cf172156d7aaf0f5c
SHA512

5a7ce160f1c270301e101033af80e8b4c57cab69d6011564bdc7299ff66cb5e3ea912df77345911e91c972e8445a32beb1241d2dcc521ff80b8444be1d5d2eb8
SSDEEP

96:K6RwHn1e0JTWS+q7QrPNSvo3iRHxV4XknADAYRFcDstge+XxHW6IVvXEPzNt:K6RwVRJxemH+cA1xaRWbMZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
631f75a954caac8bb04fd7d353b6ac60_NeikiAnalytics

Files

631f75a954caac8bb04fd7d353b6ac60_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\code\flowlink\DiagnosticControlTest\obj\Debug\DiagnosticControlTest.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ