be30d5bf86a664a9e55deb65be12b560_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be30d5bf86a664a9e55deb65be12b560_NeikiAnalytics.exe
Size

254KB
MD5

be30d5bf86a664a9e55deb65be12b560
SHA1

56454e37f49cf79b90bab6c7837dedcf4e6dcf41
SHA256

ed6f8fe1c018f226cf19462ebe6cf7d0a93e754bfd3b94491e4ed964484b546c
SHA512

ebc4d4c936d916187b3437584a022dfba6e69cff708c8dbe0b3b55c9c161031e23dfac973946cf1c2b7bffd18ab9c10732f2f2f6924c78c0757b47200dc3c64e
SSDEEP

3072:c8PgcKGfz3PNY9UO2sLQrU7dNkto3SJCFKMFFDtiTm/m5d2IicouLFom9tN4b/N+:c8IhGT13doQjo0CF9sTW8bLlEM06K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be30d5bf86a664a9e55deb65be12b560_NeikiAnalytics.exe

Files

be30d5bf86a664a9e55deb65be12b560_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Dev\shittyskidzexproject\SkiDzEX\Confuser.Protections\obj\Debug\Confuser.Protections.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ