E:\手持终端\NET2.0\SymbolClient\obj\Debug\SymbolClient.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a7d6699bdce4b618e7eda626afb99eb0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a7d6699bdce4b618e7eda626afb99eb0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
a7d6699bdce4b618e7eda626afb99eb0_NeikiAnalytics
-
Size
184KB
-
MD5
a7d6699bdce4b618e7eda626afb99eb0
-
SHA1
b868a19ffe4cfea9e8b1bc4eadd06c7ecb0d42c5
-
SHA256
e4def3479196b5d68bb1e2c10fb0e17e7a8c2b16fa76910272922e89b3bd3ef4
-
SHA512
2093ce11bcc4f743b9d1093d340399bbf101231ded0314744fbeea2b27e6953f91876810b10ec501569512b0d9c0f821c2c0f996cefa1589a6397f4f9ffe89ab
-
SSDEEP
3072:2lv7OccSED3rZR8oza9aS/Yi1FJaKb44zYYyHLw9H:O/ceoG1FJXUrk9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7d6699bdce4b618e7eda626afb99eb0_NeikiAnalytics
Files
-
a7d6699bdce4b618e7eda626afb99eb0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 172KB - Virtual size: 170KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ