E:\desktop\vs备份\vs-模板-finance撤回键-节点存档、下载-修改按钮-修改按钮添加文件打开检查\BusinessCaseSystem-MaterialSkin-master\MaterialSkinExample\obj\Debug\Business Case System.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7ce4cf0610cea83e4d1c1e172d6c11b0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7ce4cf0610cea83e4d1c1e172d6c11b0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
7ce4cf0610cea83e4d1c1e172d6c11b0_NeikiAnalytics
-
Size
1.1MB
-
MD5
7ce4cf0610cea83e4d1c1e172d6c11b0
-
SHA1
954906f341d893c44d4491f5c0afa85a9398a833
-
SHA256
58d523a88e5dcfe08ec531b8bbd965cf1edfceaacad7fbbcddfb6227218390fd
-
SHA512
b23ee150902f8a3db4ce4480310a11881ebef898e7b95bf4328081276ac6531c029283463e885727817d46346250a35fadbed03b4e2fc9c31a29ec1fc2699176
-
SSDEEP
24576:sOptx+1AVFZ79JxPgFygGsPcBapu1z0wMtiDV0:sEtssnxPgFd5w1z0wKi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ce4cf0610cea83e4d1c1e172d6c11b0_NeikiAnalytics
Files
-
7ce4cf0610cea83e4d1c1e172d6c11b0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ