F:\PC免费端开发\PCFreeClient\PCFreeClient\obj\Debug\PCFreeClient.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4bbbb8fb20d6d6568b44d7b8e303f1c0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4bbbb8fb20d6d6568b44d7b8e303f1c0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
4bbbb8fb20d6d6568b44d7b8e303f1c0_NeikiAnalytics
-
Size
37KB
-
MD5
4bbbb8fb20d6d6568b44d7b8e303f1c0
-
SHA1
71d79355bc944a9676e533397547b11593c02628
-
SHA256
1487366a2251059d19843e3ce14de41888c365cce29a1c29f76c3a9212f05357
-
SHA512
933abf1d1ea4e126063bc97911f4afeab80107cf98dbe8bd11a18470055a1ecc45178a091ef4284bdab29a670d7586cd440926929a1ad4c530bb5c0bb99e1ab1
-
SSDEEP
384:cm97lMMz5QjQwqW00KwcBxr5xdYNnuqp8MEAmxgolxgZSmUfPQaQg16tUFxgHSmF:bBukw32zKL5JkmaOtUxqekSU8g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bbbb8fb20d6d6568b44d7b8e303f1c0_NeikiAnalytics
Files
-
4bbbb8fb20d6d6568b44d7b8e303f1c0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ