b30035c0b700061b4f2e8eeb985072a0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b30035c0b700061b4f2e8eeb985072a0_NeikiAnalytics.exe
Size

74KB
MD5

b30035c0b700061b4f2e8eeb985072a0
SHA1

0331b6e0121054bdad62cc40950f4cb9cabf8497
SHA256

58e3171515e6bd768fe2a671dd5fdb9f3fcf265fe8371f393e38bbc7d7778c03
SHA512

1204668730c442b6969fe3a6352a054155b5608f5c2c0063b89d710816635f88cb820cb41193ff16c3e8ea72f30f1b7fb1bfba1c10acceba7baa443fb1d63bdd
SSDEEP

1536:YaBDgh+ncFkIfFRNfOhVcyhB2+C0+5kUEgagLa4:WIcF9f7iB5C0+56gU4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b30035c0b700061b4f2e8eeb985072a0_NeikiAnalytics.exe

Files

b30035c0b700061b4f2e8eeb985072a0_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Administrator\Desktop\Pillager_\Pillager\obj\Debug\Pillager.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ