d777f495b855363665f32f0ad64ab350_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d777f495b855363665f32f0ad64ab350_NeikiAnalytics
Size

61KB
MD5

d777f495b855363665f32f0ad64ab350
SHA1

dcb48621a24c265736776d3070fce5abc31f61cc
SHA256

d2a0ab6b345353eb3e2eb578a11e5124e4a600ed56b86da86f54b8bbe0c8991e
SHA512

41c472a84da6c526ab287651a745884caae459ce8943511de38517f0e9bab09ce0a63b4eb1d545750db4b754a392f09fb112fbd9af50d259f40fd73a19c422e2
SSDEEP

768:jg6GtwRMihbS8Y0ui/g6GtwRMihbS8Y0uing6GtwRMiCcC8UKuin:jg1/CbS8Wi/g1/CbS8Wing1/BcC8Uin

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d777f495b855363665f32f0ad64ab350_NeikiAnalytics

Files

d777f495b855363665f32f0ad64ab350_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\#\1\Visual Studio\.NET8\JCS\Utility\EraseRecycle\obj\Release\net8.0-windows\EraseRecycle.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ