Static task
static1
Behavioral task
behavioral1
Sample
5b9cc0f6b8b9d3ea329adf9520216f80_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5b9cc0f6b8b9d3ea329adf9520216f80_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
5b9cc0f6b8b9d3ea329adf9520216f80_NeikiAnalytics
-
Size
873KB
-
MD5
5b9cc0f6b8b9d3ea329adf9520216f80
-
SHA1
81b102e0e0a5ab6fcb8ca5f40bc5be5fb132c687
-
SHA256
58cb5722a78e17eb71fc3691dc16d777ca90be48149367c3e6fb6da509deb66e
-
SHA512
128e4de41973cb8193405121bb199c484745126e918f3a004911304e1b7e211a76e19ab6867a83480f03bb6fc41e7d08f7ff66b2f52ac855cff3586bf0bbc810
-
SSDEEP
24576:YupppppGoXq3X1+MPhHWmPHak9ZcKHMnC6+:YupppppGoXqT2yHpgnC6+
Malware Config
Signatures
Files
-
5b9cc0f6b8b9d3ea329adf9520216f80_NeikiAnalytics.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
11:d4:7e:89:e1:fd:00:af:4a:2a:c2:0c:59:fb:3c:1eCertificate
IssuerCN=PARADISE\\lfisherNot Before30/06/2023, 15:38Not After29/06/2024, 21:38SubjectCN=PARADISE\\lfisher4d:b6:5d:8c:98:f6:25:d3:24:ec:11:28:d8:51:eb:d1:a6:21:f5:1d:4e:a5:39:42:93:9d:b3:1d:41:73:8b:dfSigner
Actual PE Digest4d:b6:5d:8c:98:f6:25:d3:24:ec:11:28:d8:51:eb:d1:a6:21:f5:1d:4e:a5:39:42:93:9d:b3:1d:41:73:8b:dfDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\lfisher\source\repos\Paradise Hardware\Paradise Hardware\obj\Release\Paradise Hardware.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 848KB - Virtual size: 847KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ