d2fda92d3a5f44c67e59424c3b653370_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

d2fda92d3a5f44c67e59424c3b653370_NeikiAnalytics.exe
Size

418KB
MD5

d2fda92d3a5f44c67e59424c3b653370
SHA1

5e142a2b677980c5c7c5203320da01865f0c349a
SHA256

8b8f0baa49a872dea996710a88bfcac9c8e1188ffb4b729cfbf447ef3cfe67a6
SHA512

1c6789afe193bc2f7cfcfb67415b554b38c40802fffdc0c1a3786a8024f8befd774ff26307cf97d7e2677efbbae582fdf0230b588b1bd3848610727c109eb3cb
SSDEEP

12288:/S3TR3Kvx0mn9UDQqtw+ZgqfjR2dTLZnr4OMw:/Sl0n93qtw++Q18LZnMS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2fda92d3a5f44c67e59424c3b653370_NeikiAnalytics.exe

Files

d2fda92d3a5f44c67e59424c3b653370_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\govno\source\repos\Heil\Heil\obj\Debug\Heil.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 415KB - Virtual size: 415KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ