34e3de16cea36ec61e7c183a7de49620_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

34e3de16cea36ec61e7c183a7de49620_NeikiAnalytics.exe
Size

7KB
MD5

34e3de16cea36ec61e7c183a7de49620
SHA1

62993a8e14fb3166fd557a1c5ad4180bd578b109
SHA256

0c43e5ae092c71b2fab7d30b1495a7841a798e400a0db2892f026a5cba849b28
SHA512

4c4152985d95b7a2ccd72cb778ae2d0c53d757c211e28000b5a4ed37362eaee19b4018472e467f9c252329c02033b8519df0d5338e21c4ebe0c61553dcbd001e
SSDEEP

96:RbC+EARxJOkH3zT7M7mfSTt22kcq679k0:RbC+HRxokjqEuxk0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34e3de16cea36ec61e7c183a7de49620_NeikiAnalytics.exe

Files

34e3de16cea36ec61e7c183a7de49620_NeikiAnalytics.exe
.dll windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\darkfire\Desktop\Lonhhorned\reactos\output-VS-amd64\msvc_pdb\kbdkaz.pdb

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ