F:\Office\Target\x86\ship\postc2r\x-none\setlang.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1b07393272914cc728dc48d69d2645f0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1b07393272914cc728dc48d69d2645f0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
1b07393272914cc728dc48d69d2645f0_NeikiAnalytics
-
Size
1.4MB
-
MD5
1b07393272914cc728dc48d69d2645f0
-
SHA1
98a14b3fdea8be778c61d6bf46f3cba3aa570fdd
-
SHA256
cc5402e8a2b2ff91c74797da181f2bc4026972cab2f1e6292edb1043bdcbb601
-
SHA512
30d68619a0b7f08b37b6eeef7d07e799491e2c640df8922302aacda789faecad4223fc44a163c68e76c52c879ec48a74bb781e79af5e5593694a4efbd77efecc
-
SSDEEP
24576:tH8bCz1ay0rU+H8bCz1ay0rUyM84p7c+lPYvkK54GXW96H0r:tpKJpKLM84p7ukKHrHc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b07393272914cc728dc48d69d2645f0_NeikiAnalytics
Files
-
1b07393272914cc728dc48d69d2645f0_NeikiAnalytics.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c2r Size: 512B - Virtual size: 300B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ