f19892b95cda064440664e1eab7ff210_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

f19892b95cda064440664e1eab7ff210_NeikiAnalytics.exe
Size

97KB
MD5

f19892b95cda064440664e1eab7ff210
SHA1

7a88b0ea52cb05cbc86f44be2d0503a2e7086d47
SHA256

859f52879c9b087aceb01bcdb6d1cdd884d010df1605dc59ddda4b66a0dbe620
SHA512

8fb200b733acca275c6dc24a3e8c468237f4bc55ec30aff26c9eed243a925b7435925891a027786549a0de5e1c16ccd1ba21382b64e028dc78782d2a817bafd2
SSDEEP

1536:bpU/JwSHOz9seyQM/u0xvP1egCk7vSbZAsnxy9ypGeSjfr:d9su0xv9qk7abZAsnxy9ypGeSjfr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f19892b95cda064440664e1eab7ff210_NeikiAnalytics.exe

Files

f19892b95cda064440664e1eab7ff210_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Ace\Desktop\glock-clicker-main\Glock Clicker V2.0\svchost\obj\Debug\svchost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ