C:\Jenkins\workspace\TRUNK_BUILD_ThumbnailcomRegisterTool\tncreg\obj\Release\tncreg.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5ef7115fb3a04661bb1d3cd8490c1560_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5ef7115fb3a04661bb1d3cd8490c1560_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
5ef7115fb3a04661bb1d3cd8490c1560_NeikiAnalytics
-
Size
11KB
-
MD5
5ef7115fb3a04661bb1d3cd8490c1560
-
SHA1
b9912baf18aea94d2ddc5dac5da3ae1660b94238
-
SHA256
542fe37d9b28682b87cccfcea45a820a264febba896d10cc54aac18462c3981c
-
SHA512
c857944d7ebe599f94861d5b3b4d9a129928179478bdd02a1ce9a8e42ae447c25a0f2ac4ede3134ec7f8fcded1d5447a069c1bd03d162cf1b96313f6b86dd9ea
-
SSDEEP
192:cfasoQeS7C/9ixOYZOaB6KTRszYcHe+Z:eojSGioq76KTCzYcHe+Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ef7115fb3a04661bb1d3cd8490c1560_NeikiAnalytics
Files
-
5ef7115fb3a04661bb1d3cd8490c1560_NeikiAnalytics.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ