464d6e6bef38ee7704359b7ff78af4d88486729f03245d0521208608594c9b99_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

464d6e6bef38ee7704359b7ff78af4d88486729f03245d0521208608594c9b99_NeikiAnalytics.exe
Size

16KB
MD5

ecd7108a27f5dd8edb08ae7be8331940
SHA1

bf4bc6571113f717034f9b2d97d9addbc02857fc
SHA256

464d6e6bef38ee7704359b7ff78af4d88486729f03245d0521208608594c9b99
SHA512

b42b55809cf8bc1d2ad4318c49811f0d8dbb78bdc7ff6e673621c05e4d7c48d46fc47fc31dfb75749b5940b31ae5640f98e381d1d5e1d2e72ed1d5e23961ff46
SSDEEP

384:Nifb6ejNQzylCAD6iR6mskbQKZmMfGrXlo:ORQzywADV4ZUurXlo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
464d6e6bef38ee7704359b7ff78af4d88486729f03245d0521208608594c9b99_NeikiAnalytics.exe

Files

464d6e6bef38ee7704359b7ff78af4d88486729f03245d0521208608594c9b99_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\workspace\workspace\p\Library\Bee\artifacts\1900b0aP.dag\Timberborn.FactionSystem.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ