5f9e495804d0e8b1e0fae95e8e6d5460_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f9e495804d0e8b1e0fae95e8e6d5460_NeikiAnalytics
Size

32KB
MD5

5f9e495804d0e8b1e0fae95e8e6d5460
SHA1

1a4380988e34c135158153efedb6383c0478f9ce
SHA256

307dca934ac516186ffb21a1ba0a5e66ab97db76edcfaf0f492131248c76dd19
SHA512

1931a89fae06c9793900184d6c765c636d62cbf19e15fe2a6f2f9eb3f0fe8c601e45ef46cc0d3ee547aa4f6ce4a5112b96244e3cca267f3756f52e6b1fdcf25a
SSDEEP

384:zctRZSyfx1T2Wjjt+BJoDEwwY8+eOydNbPf:yTdjcw7857

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f9e495804d0e8b1e0fae95e8e6d5460_NeikiAnalytics

Files

5f9e495804d0e8b1e0fae95e8e6d5460_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\jenkins-slave\workspace\swl-bb\Release-44\SWL\projects\ScreenGrabber\Gma.UserActivityMonitor\obj\Debug\Gma.UserActivityMonitor.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ