a3dc76a4b67170789be3d1133e4f0780_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3dc76a4b67170789be3d1133e4f0780_NeikiAnalytics
Size

158KB
MD5

a3dc76a4b67170789be3d1133e4f0780
SHA1

9f392e08cae172bd329077137d061e0efdf9194f
SHA256

835c7ee3f14786763b001821b6fc11cedbe452516a0521df99d85c9bd26cd079
SHA512

14844b7786167785284b557a3e0db50df60ae7d306eb593215706164ef16145ee58d117650203a7e49236440825c376b92cbe1ea282739eecdf19b5f7e1058be
SSDEEP

3072:tZIu5FptMOI73Yh5qWjdkEJe4zLB2Q+Y8+K2+uPi0yg:f35rtS+6EJD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3dc76a4b67170789be3d1133e4f0780_NeikiAnalytics

Files

a3dc76a4b67170789be3d1133e4f0780_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\pc\Desktop\WindowsFormsApplication1\WindowsFormsApplication1\obj\Debug\WindowsFormsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ