a5e101021bed7e11911433bcda48eb10_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5e101021bed7e11911433bcda48eb10_NeikiAnalytics
Size

91KB
MD5

a5e101021bed7e11911433bcda48eb10
SHA1

873c361b196ae2eaa7f3af2dce5119b9a102403f
SHA256

36798ebab2e3d27aa0b5e8823bef05ec2d2b97cc1e870ecf9eff6f00389f1ef3
SHA512

f64ab780c0456689c391f1fb8173da83cf2e2b9600d2cdcd828de0d23f6db8489c8cdfd43ace278247530782868d0d197c42c6c8768f89472f12b832a4a3c04c
SSDEEP

1536:RAVLE4k2OzZt/Y+bWOJdK8B78q6/2utwkliXV/ihZ3C7+X+ySq9p4dfg:RS42OP/YBOolil85i+X+4t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5e101021bed7e11911433bcda48eb10_NeikiAnalytics

Files

a5e101021bed7e11911433bcda48eb10_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Enovate\SoftwareEngineeringRepo\batteryproduction\WelderLibrary\obj\Release\net6.0-windows\WelderLibrary.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ