c:\Users\Steve\AppData\Local\Temp\sxbnh6vq.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a4aef29d111836fb5a4d3c8a79ecfbc0_NeikiAnalytics.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
a4aef29d111836fb5a4d3c8a79ecfbc0_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
a4aef29d111836fb5a4d3c8a79ecfbc0_NeikiAnalytics
-
Size
9KB
-
MD5
a4aef29d111836fb5a4d3c8a79ecfbc0
-
SHA1
18263bb7e0d631ec360d78dc8883cca998391c40
-
SHA256
6032bf8d20bd5b0445ed018efd7f14873c3beb4fa36f039d44080222ee33f204
-
SHA512
e9255db1146f98b7d86589bed9b9dfda99a8c27b56e672f4723c9469e0bc2c4330d65266e14b379718ff31ac0e972409fd93290df0adff2755573395ea908df3
-
SSDEEP
192:I5REOvhTgvTKFujjRfY+7bYSoL6uAIrgBrSaOPw0i9sWTg:I5REOxwY+7bYSoLUeXPWg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4aef29d111836fb5a4d3c8a79ecfbc0_NeikiAnalytics
Files
-
a4aef29d111836fb5a4d3c8a79ecfbc0_NeikiAnalytics.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ