699261671a526e56a4a3f0cfcf0bd5f0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

699261671a526e56a4a3f0cfcf0bd5f0_NeikiAnalytics
Size

15KB
MD5

699261671a526e56a4a3f0cfcf0bd5f0
SHA1

dabb3c16cf823d0a3b95ded44c6f21dcd3e856dd
SHA256

77c39486c36f8326e055ad2af5c1a2f44a111b84ff74748c034c815b629e29ce
SHA512

c922ac7343eb66de817f9a520cc52af2fb8c0179914f19fb51864d91a034f8fbc7b2222837ce4799a6f34f37092af85af65d10313654e1c5b54934b71b52c129
SSDEEP

384:2D8cyaD473LK71DILxm+ehDcyTSmwJb3X76Y+24IA9C65msxAYR:2AcJDyWII+68GPIAc6msxAYR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
699261671a526e56a4a3f0cfcf0bd5f0_NeikiAnalytics

Files

699261671a526e56a4a3f0cfcf0bd5f0_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\work\Projs\Code\appstoreXplanForPack\AddIns\BC.ConfigManager.Plugin\obj\Release\BC.ConfigManager.Plugin.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ