c1012158f63494d0243cac21ae045070_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1012158f63494d0243cac21ae045070_NeikiAnalytics
Size

67KB
MD5

c1012158f63494d0243cac21ae045070
SHA1

7bf27a184cbac9d79dbd7ac57bad1353b985dc4e
SHA256

62d4a417a281262088328206f9077c0a777c3a53017615f11e50e8e6fbd3b7b4
SHA512

78f7ca89c354de3dc27ed2bb1daaff3786bdc59bc2a8ca9689a7a4ac38abb14907a3487a553fb5462851aecf6025f1f38127997615ff3e78702f412e71efa3b2
SSDEEP

768:A6HdHByIwwxAo6FG8k85sNIKSIdBiaVXR+CkVqUpOcbBjlL4:AOxB8iP29kasNugBHBAqgOCP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1012158f63494d0243cac21ae045070_NeikiAnalytics

Files

c1012158f63494d0243cac21ae045070_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\azmodeus\My Documents\Visual Studio 2008\Projects\MMOViperBot\XMLHelper\obj\Release FFXIV\XMLHelper.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ