a3fdb3999af795b3b8f5c22e358291a0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3fdb3999af795b3b8f5c22e358291a0_NeikiAnalytics
Size

79KB
MD5

a3fdb3999af795b3b8f5c22e358291a0
SHA1

f81e46962c149f5248c914c9c0aca6998793b892
SHA256

07c04d4b59751d0825328c66537524809faf33a53fe6afd218608bca63ee177e
SHA512

c513b6096d05da9cac9707883959559c7ea9c97c2b80abce088f4b6c263268fdb2685e1844efcc519f385646e7e22c2fcf110274fa83d49cb54e1acc23cc1950
SSDEEP

1536:r6H4kLgLS42wiicUAeLDxh4SXDhh2WBVSrQpNH:ry4m1wiJteFXDhZBVSk/H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3fdb3999af795b3b8f5c22e358291a0_NeikiAnalytics

Files

a3fdb3999af795b3b8f5c22e358291a0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\WS\MDURETSAppDev\MDUREnterprise\MAIN\ERPDataDownload\obj\Debug\ERPDataDownload.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ