a55192fe0187581f78743999e407f840_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a55192fe0187581f78743999e407f840_NeikiAnalytics
Size

137KB
MD5

a55192fe0187581f78743999e407f840
SHA1

8d1a89ed1317b2fd539b6cfba58f5a5cb2e648db
SHA256

48747e8b4a87f6cd0ec64089cd840fe751a1340caf02cfe6672d7bf3d13f81a3
SHA512

74520e283d61213ab433a2c1a27c8771353d180f5e4163789fef1a380b7e69715dd8509380da3200070d32d2f08fbda1f9f614442219243c74a950796ff28f1f
SSDEEP

3072:qN6Z1PszvE55GS/U1vfHs4A34CG+FWRiTRjLFVsYtMdq/hf+Zgg:n7P8YoSc13Hs4p9+FWReJLXT5/hR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a55192fe0187581f78743999e407f840_NeikiAnalytics

Files

a55192fe0187581f78743999e407f840_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\dawid\Downloads\Tibia (1)\Tibia\obj\Debug\Tibia.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ