31d3c8c99b2d3dfec482e28b4f59ec90_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

31d3c8c99b2d3dfec482e28b4f59ec90_NeikiAnalytics.exe
Size

764KB
MD5

31d3c8c99b2d3dfec482e28b4f59ec90
SHA1

6b8409d08f399d69ceb062876c7517dd31adf688
SHA256

98097256ca86e87087844f598d0b3f5e6ec4c57c65e67013dc51c5923a1b4e21
SHA512

5b9797dd789f0f6043df87db577ec495aa03376ad93386db3f0b3a3026443e4c4163da56ddcef2409c1d38b7a40adf7531742c1cd3bc2fb94d17d865705b4cf7
SSDEEP

12288:9zQefqmAFfkhY9XuSImLHWCXtkFe4bO5pEd:yefsFfimLHWCXt0e35pEd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31d3c8c99b2d3dfec482e28b4f59ec90_NeikiAnalytics.exe

Files

31d3c8c99b2d3dfec482e28b4f59ec90_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\Dev\GT\Library\Bee\artifacts\1900b0aP.dag\PlayFab.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 762KB - Virtual size: 762KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ