Static task
static1
Behavioral task
behavioral1
Sample
58d8bc2358d7bf72d015225e08da0f40_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
58d8bc2358d7bf72d015225e08da0f40_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
58d8bc2358d7bf72d015225e08da0f40_NeikiAnalytics
-
Size
127KB
-
MD5
58d8bc2358d7bf72d015225e08da0f40
-
SHA1
543038c750afebe9ca33b99463ba0c9690456eef
-
SHA256
93077b6ab605292787d7b86ca3a0076e56f264cbe7045eb71780bc7ea9861171
-
SHA512
7a56b44f6bc4e37405b63e9d962758e9ea6046e88b45d688b298d8abf6b05135aa5139a08c511e38da25132b05c6c99ec1d7c2d7724ab6accbb12892a48d832d
-
SSDEEP
3072:xgauxx19M7qUpHucfTyi5C+LpA+D4+p2Y/pbmq:5uxj9M79d2oNA+XnX
Malware Config
Signatures
Files
-
58d8bc2358d7bf72d015225e08da0f40_NeikiAnalytics.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
72:4a:69:fa:94:e4:b3:93:4e:ec:a1:09:61:20:40:1bCertificate
IssuerCN=DJURIC-T14\\djuriNot Before16/01/2023, 17:42Not After16/01/2024, 23:42SubjectCN=DJURIC-T14\\djuri7c:e4:8f:7c:ee:38:72:15:63:36:b1:39:10:26:d8:f9:e2:40:24:c8:37:22:5a:5d:ff:01:cb:9f:16:8b:da:24Signer
Actual PE Digest7c:e4:8f:7c:ee:38:72:15:63:36:b1:39:10:26:d8:f9:e2:40:24:c8:37:22:5a:5d:ff:01:cb:9f:16:8b:da:24Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\Users\djuri\source\repos\msflowcontroller\MsFlowController\obj\x86\Debug\MsFlowController.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ