934c8b27cba94255a56b5acdc61dd864b039f709155fc7d577c16888beb87e3f_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

934c8b27cba94255a56b5acdc61dd864b039f709155fc7d577c16888beb87e3f_NeikiAnalytics.exe
Size

227KB
MD5

69734fc53593476fcfc640564b357440
SHA1

23f2c51050cd5cb1a2371842efa24fea2152a0bc
SHA256

934c8b27cba94255a56b5acdc61dd864b039f709155fc7d577c16888beb87e3f
SHA512

8f83f83b4b6c881577367af0fd3d90ae350764aa31e4ef05619a509e2e1adef8ba30d30cb01a9a4951b2ce5a68ee8880282e50046dd9630873b7b64cd5bfd8a2
SSDEEP

3072:BaIz9/PwaGbUtWqTvauc+IQW15qSJu7D7rsssMWC36171SyOURuwB9avP:B19CbzsaV+IcS1fu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
934c8b27cba94255a56b5acdc61dd864b039f709155fc7d577c16888beb87e3f_NeikiAnalytics.exe

Files

934c8b27cba94255a56b5acdc61dd864b039f709155fc7d577c16888beb87e3f_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\yamldotnet\YamlDotNet\obj\Release\net60\YamlDotNet.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 225KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ