a0f8dba6aa17981525e22749148630c4eb2a7c42185b4f32ad38421c50c07a00_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

a0f8dba6aa17981525e22749148630c4eb2a7c42185b4f32ad38421c50c07a00_NeikiAnalytics.exe
Size

1.5MB
MD5

33b9db9048d68d4ae9e937ba784dd8f0
SHA1

f02f4139f7174b955901c462bdcb9ed7dbcdf2d9
SHA256

a0f8dba6aa17981525e22749148630c4eb2a7c42185b4f32ad38421c50c07a00
SHA512

6ed4073faf63c08450144f5ab911413a46108faf0e788bcd7a81cda7ce2a4a22ae886661df5ef7dddf69a61612143726bd06e350096bfeefe853e558c9d82539
SSDEEP

24576:X37SqZUSylzMTMNNd+g5Wk78GBBjgrIQtDYK64okXGj:bS0U74jgxBBjHQtDYKt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0f8dba6aa17981525e22749148630c4eb2a7c42185b4f32ad38421c50c07a00_NeikiAnalytics.exe

Files

a0f8dba6aa17981525e22749148630c4eb2a7c42185b4f32ad38421c50c07a00_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

A:\CrossProj\lloydFinalBattle_updater\obj\Release\net6.0-windows\win-x86\Crossout.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ