cb60380b9605f39ab3ee342cf06fa850_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb60380b9605f39ab3ee342cf06fa850_NeikiAnalytics
Size

60KB
MD5

cb60380b9605f39ab3ee342cf06fa850
SHA1

261c533c8cfecb0e9f8980dfb09eecb48f2861e0
SHA256

70301294e486ec2c673f21338c0a3808cb645704900bfca2aad90e62d419595c
SHA512

fd2e9c6019591121be372d9c0ff3f4c60108799533b6db48a5ee3b2224b6886b91c053147a28fe12e06939745f346f5fde615474ccd4d217c2b76f5021c4a320
SSDEEP

768:syPYZJ65hfOgPPqhj7vuKdM4+cQrAIscn4koXJzbCC9zxRKsH9fmHaq6lpDYADNs:I+mmg6cQrHQZ2C11d+Haq6lp+7CQf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb60380b9605f39ab3ee342cf06fa850_NeikiAnalytics

Files

cb60380b9605f39ab3ee342cf06fa850_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Conet\Conet\obj\x86\Release\CoNETPlus.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ