c3aa97e5ef45680d936a51d05c5ff6d0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c3aa97e5ef45680d936a51d05c5ff6d0_NeikiAnalytics
Size

16KB
MD5

c3aa97e5ef45680d936a51d05c5ff6d0
SHA1

8ba6fc787880e89b6535131a845da5162db16a48
SHA256

1c275968159f17218a86f81af4aeda25e1fd0cfb6f75d2a944c5b4e50208bdd3
SHA512

85ee4193f92a28d46e3da5cca6145296ad2a63a4614d369dd5f4376e9970bb5f0ca64dab31c22f9e8a7931fdfaf7cf90e4c491c24f568e883a118d8054633025
SSDEEP

96:Y0CkkYhF/SroTvEh+rvhoTSvbEMc1gXytzNt:YHNYhFtzEhw27r1YyH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3aa97e5ef45680d936a51d05c5ff6d0_NeikiAnalytics

Files

c3aa97e5ef45680d936a51d05c5ff6d0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\1\_work\1\s\PlatformInfra\Src\LogService\LogServer\obj\x86\Release\LogServer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ