D:\Armin\Creds\HK\New\tools\xeno-rat-1.8.7\xeno rat client\obj\Release\managing_app.pdb
Behavioral task
behavioral1
Sample
1d4305d66bc8c568230728a811f51e30_NeikiAnalytics.exe
Resource
win7-20240419-en
General
-
Target
1d4305d66bc8c568230728a811f51e30_NeikiAnalytics
-
Size
7KB
-
MD5
1d4305d66bc8c568230728a811f51e30
-
SHA1
55a64533d2a4f15863b04ead085ff16c82fc015e
-
SHA256
67c85c506e3c054bba21ae2824007436ad51cdc3cb3ae9a573787e736765273e
-
SHA512
639a76f98de83a78379e8fab93ec9922eba990be34f587614edc7afe9c1356d34765507bcf8d15198d15e1578e585a11ad46f0441662b188745e18cc3ceab853
-
SSDEEP
96:X68QExAevpCdbK/t5kAKMAYrTIHfX8aIOjiB61QNwoOPzNt:X0gpCdW1SYrTIfX86jwdk
Malware Config
Signatures
Files
-
1d4305d66bc8c568230728a811f51e30_NeikiAnalytics.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ