b65d97cf4a2b9a72ba238f31c56beba0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b65d97cf4a2b9a72ba238f31c56beba0_NeikiAnalytics
Size

110KB
MD5

b65d97cf4a2b9a72ba238f31c56beba0
SHA1

cd8fb29f54764fa68b19ab0c154fc2c52be22e3d
SHA256

59c33f2bedbc6c3ada0568290dfa0c8c4c50290649d43fb5ae7fa630979c74e3
SHA512

eca57ca8cc3467ec6ce11677bf9e8144a60c0664e08b0d21b2c1db616bdcd35b4aa0a1b7662d8d3508579ca09a2b4ceaafe3c9d93ea05a6a5eae3acd233a29a7
SSDEEP

1536:yGfa79AfiKcns/DZKOxN3eJG53G73mxdvdpAPvujh:yGPjcnyDZKOj32GhNvWujh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b65d97cf4a2b9a72ba238f31c56beba0_NeikiAnalytics

Files

b65d97cf4a2b9a72ba238f31c56beba0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\lillo\Documents\Visual Studio 2015\Projects\AlemWanze\AlemWanze\obj\Debug\AlemWanze.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ