C:\Repos\prographics\Source\VVShell\obj\Debug\VVShell.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8b26dd073c3ad451ecfa2a3016c05d60_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8b26dd073c3ad451ecfa2a3016c05d60_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
8b26dd073c3ad451ecfa2a3016c05d60_NeikiAnalytics
-
Size
1.0MB
-
MD5
8b26dd073c3ad451ecfa2a3016c05d60
-
SHA1
c15b14ad0cb67d64bf4d8cdc3a692c67bec5c3eb
-
SHA256
af47ae1cd0a0305c2546c97fdfda35302ea546f4b401fd1536eb41c4102f9198
-
SHA512
28f25a21c63f95e466bdb7f30b165b2d802ea1b331e2f3c89c9cb916eeb77df58727fbc4506326d564292131a7a25e76c215c8c0fc294e3d8879ddd7a3a24b3c
-
SSDEEP
12288:pgzlDBHfk3LjTiQJE5QjrKRnKVzzzVzzz9Foxp+5k9If6PpchFTtv5tjtDWJPcHY:UFBHfk3rjmGnhzRMzPnhAdZlQdIGqO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b26dd073c3ad451ecfa2a3016c05d60_NeikiAnalytics
Files
-
8b26dd073c3ad451ecfa2a3016c05d60_NeikiAnalytics.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 974KB - Virtual size: 973KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ