1030d37d53d4e4b800e65d7cd159362dc09bdcbf9f63ad836712447fdc245ed5_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1030d37d53d4e4b800e65d7cd159362dc09bdcbf9f63ad836712447fdc245ed5_NeikiAnalytics.exe
Size

7KB
MD5

d0bf7ce875ecde222043df9f785c2830
SHA1

135e4a2ffbdb4bd1bd653743990618cc32627f37
SHA256

1030d37d53d4e4b800e65d7cd159362dc09bdcbf9f63ad836712447fdc245ed5
SHA512

3d23444a570f14c32cbebe1f9965d07d04bb42dc8dfd49bf97e18b18d550cbcaad42b439ccba3c7cebf36622e482f341d7b6fb3975be1260d0cb046857539cdc
SSDEEP

96:79f0AmgP72J3QsvUcwgAcVNUqV/4+WElfzNt:79fF2JTcc1V+IpWqJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1030d37d53d4e4b800e65d7cd159362dc09bdcbf9f63ad836712447fdc245ed5_NeikiAnalytics.exe

Files

1030d37d53d4e4b800e65d7cd159362dc09bdcbf9f63ad836712447fdc245ed5_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\user\source\repos\loader to run telegram sender shellcode\loader to run telegram sender shellcode\obj\Release\loader to run telegram sender shellcode.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ