C:\Irvine\Examples\Lab 02\Debug\Project.pdb
Static task
static1
Behavioral task
behavioral1
Sample
48c80eea8f486608c930b103b30ad970_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
48c80eea8f486608c930b103b30ad970_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
48c80eea8f486608c930b103b30ad970_NeikiAnalytics
-
Size
22KB
-
MD5
48c80eea8f486608c930b103b30ad970
-
SHA1
3e263a63ec3251d11b3b6c1121775ab4e6d64108
-
SHA256
85bb69ce54d2820f7803cfc919eb10500ae71ab31cc375894788d6677a154c68
-
SHA512
e43c7c38935bb2008893a70fb1414c9fa1030ba442ee7c1b433741b62a980017dfe7f40046f232ece395323f7077acf55c3893ab73b105d4375c12996c5bba0a
-
SSDEEP
192:kCiNPtkvdjEbW8KhWcFPLPWQhrmn5fHCwkuj8k1kZpzP:kRPadjE5/cFPTWQwswkTd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48c80eea8f486608c930b103b30ad970_NeikiAnalytics
Files
-
48c80eea8f486608c930b103b30ad970_NeikiAnalytics.exe windows:6 windows x86 arch:x86
cd8e6a768bcbf7d8f3deeb5e51264eb0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
ExitProcess
CloseHandle
CreateFileA
FormatMessageA
FlushConsoleInputBuffer
GetCommandLineA
GetConsoleMode
GetConsoleScreenBufferInfo
GetLastError
GetLocalTime
GetStdHandle
GetSystemTime
LocalFree
PeekConsoleInputA
ReadConsoleA
ReadConsoleInputA
ReadFile
SetConsoleCursorPosition
SetConsoleMode
SetConsoleTextAttribute
Sleep
SystemTimeToFileTime
WriteConsoleA
WriteConsoleOutputCharacterA
WriteConsoleOutputAttribute
WriteFile
user32
MessageBoxA
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 685B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ