5cf3d83798652cd26720300af2894930_NeikiAnalytics | Triage

Sharing

General

Target

5cf3d83798652cd26720300af2894930_NeikiAnalytics
Size

406KB
MD5

5cf3d83798652cd26720300af2894930
SHA1

da247f35cb23701ba547563b81ae86e6da289ae3
SHA256

8757f86ef629e06f6495358860081e0b71d4ed8cdd688e8ec8a3336b0328c86f
SHA512

230be712e2dec232e4cfc0ab4aad9afa37f022f1a95f130a4440e9148e7836042a95549f09bc6b7cb716e285babbdfed05283041d392e1f7a0c14b7a6aed2aa1
SSDEEP

3072:kYnZUoaNcmhsky+o8YekAwFcxmqWqWqsi42tttUttl0IFxiYdJlfz3oIwxrkXfUJ:PucmTKLFcAqWqWqsi4LdjfrohhXJ5t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cf3d83798652cd26720300af2894930_NeikiAnalytics

Files

5cf3d83798652cd26720300af2894930_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\a\2\s\Source\Karmak.ProfitMaster.Services\Karmak.Services.ProfitMaster.PMServerApplicationSettings\obj\x86\Release\Karmak.Services.ProfitMaster.PMServerApplicationSettings.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 403KB - Virtual size: 402KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ