1247b697fdb29aab7b605a11a2d38a71e689aa31a9e5b02c6fc5e3a92adcbf22_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1247b697fdb29aab7b605a11a2d38a71e689aa31a9e5b02c6fc5e3a92adcbf22_NeikiAnalytics.exe
Size

36KB
MD5

041cd82a15df7df80e547506b7e801b0
SHA1

4c11082e78576e66c8d50b957602fc874a366745
SHA256

1247b697fdb29aab7b605a11a2d38a71e689aa31a9e5b02c6fc5e3a92adcbf22
SHA512

8724081521c5a0057b44b1331db7429a5cddbe19439cf6d73e042d80767ffb91f6a932f8c7ab012838af50a9d1997ed8f19634f6756eeeb7119ddeced62b41bb
SSDEEP

768:L5qtzre6pbpMctQPBL+ZldQxEB5NUpyBmI+N9lPbvUwCArj4cPZDyutMdU8X1dnC:L5qtBQZLwleSB5NUpyBmI+N9lPbvXCAr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1247b697fdb29aab7b605a11a2d38a71e689aa31a9e5b02c6fc5e3a92adcbf22_NeikiAnalytics.exe

Files

1247b697fdb29aab7b605a11a2d38a71e689aa31a9e5b02c6fc5e3a92adcbf22_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\liam\Source\Repos\AntiCrack-DotNet\AntiCrack-DotNet\obj\Release\AntiCrack-DotNet.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ