f90fcfa690de0bc353b73e7957694100_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f90fcfa690de0bc353b73e7957694100_NeikiAnalytics.exe
Size

35KB
MD5

f90fcfa690de0bc353b73e7957694100
SHA1

3a45b09ca100c57c5ec15bebe019094fd78b6030
SHA256

432b6f39f7ba3ac61dc44cf8fd2ba0aa6bea16ed674328d2e7f0410b1d4530f8
SHA512

413029ebd654efe4b8f898b35476ccec1e67932c6164bc4979c3de85b8f99a0bf252e68fbdd4a4483d301b3ec10719190e9c9c793a4f9e879d549ff0a9ea9934
SSDEEP

768:Q7kzCO5IMPwRUNEgxZil2Wlkonod3Qea0U5Qisg+saqn6D1:p8l2Xt3Qp0U5RaqnC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f90fcfa690de0bc353b73e7957694100_NeikiAnalytics.exe

Files

f90fcfa690de0bc353b73e7957694100_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Administrator\Desktop\Pillager_\Pillager\obj\Debug\Pillager.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ