48ec29c5a018b0c5c8e22bb416883bef4b6413cae798178be18c5bbf259ebb6f_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

48ec29c5a018b0c5c8e22bb416883bef4b6413cae798178be18c5bbf259ebb6f_NeikiAnalytics.exe
Size

22KB
MD5

b93d2efa5b3b14a46074c05b27536030
SHA1

ad7ee2655d44c6d23db5eae9708afa8c1aa4579b
SHA256

48ec29c5a018b0c5c8e22bb416883bef4b6413cae798178be18c5bbf259ebb6f
SHA512

16ee622439ff1a14af0d7132424ff23360324f470341191796e8a7af14020f6ae8b1b60144cb4652ecc8b7bcced5b9cbc30dd296f7d483905737ad025f277e01
SSDEEP

384:bPmTvdtrbKnwRFjV4EwHuApJyA9ljtPuJ+QDFD61x+AE63uMSKLG6kkEWFLzB:bPAdxKwPV4bOCJD97Pg/x7CLRkk1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48ec29c5a018b0c5c8e22bb416883bef4b6413cae798178be18c5bbf259ebb6f_NeikiAnalytics.exe

Files

48ec29c5a018b0c5c8e22bb416883bef4b6413cae798178be18c5bbf259ebb6f_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\Project\天然气NX二开\Replace_Sheet\obj\Debug\JR_Replace_Sheet.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ