bfdcdc4dd5a481ca7773b0323c493e80_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfdcdc4dd5a481ca7773b0323c493e80_NeikiAnalytics
Size

41KB
MD5

bfdcdc4dd5a481ca7773b0323c493e80
SHA1

c9332201a28b0dbf060201a3a39232a4fab3e57a
SHA256

0ca34179d8f4cef8ffdc419f190bc9686017ad88410ce2caa47dfea61885a71e
SHA512

99099e28bad6719149cf2bd79f3c88c3c04c1d7e65d0f0ffac2387a042d3ab6f44746e0ebfba2f0c435b41969658365ab4c88d85572e5b97a9a01ed6036cdb25
SSDEEP

768:+kaEmXShGl1cJMR/lA2fcxU56wo6RLcFmnbh/jcaCiIE3f+M9ewpHmzKmLILR:bazepacxU56wLcFSbh/jcE39h6B2R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfdcdc4dd5a481ca7773b0323c493e80_NeikiAnalytics

Files

bfdcdc4dd5a481ca7773b0323c493e80_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

G:\development\SPT-MODS\StashSearch\StashSearch\obj\Release\net472\StashSearch.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ