Static task
static1
Behavioral task
behavioral1
Sample
b10c647288b17af57fed6a69cd502530_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b10c647288b17af57fed6a69cd502530_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
b10c647288b17af57fed6a69cd502530_NeikiAnalytics
-
Size
454KB
-
MD5
b10c647288b17af57fed6a69cd502530
-
SHA1
25b3d31b41afb9526a905df4f9c9cc90538179fd
-
SHA256
1a9071589e1df28e28df280c9624fbf82af58d92e54dabfa321fd940870b2930
-
SHA512
515791b51ec3b5af64f053087aaa0ffa30edab3d895ecdd3565f17c031e7398629a3f6376e27c554b825ab98dba96021ccc6d35999532cdaa2dda98555601aef
-
SSDEEP
768:Mfyu4zzytPIER9skaj8FRz45pRFRz45p2EVN:M+2tPIO9v3RzOdRzOoI
Malware Config
Signatures
Files
-
b10c647288b17af57fed6a69cd502530_NeikiAnalytics.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
43:9b:b4:95:2f:55:03:bf:45:69:a4:0f:d8:8b:e6:68Certificate
IssuerCN=NTG\\mkressNot Before09/04/2024, 13:47Not After09/04/2025, 19:47SubjectCN=NTG\\mkress2e:06:68:60:89:b5:92:f8:bc:35:63:b1:42:56:68:75:bc:48:b7:33:77:3e:fc:27:5c:40:1f:28:90:3d:d4:02Signer
Actual PE Digest2e:06:68:60:89:b5:92:f8:bc:35:63:b1:42:56:68:75:bc:48:b7:33:77:3e:fc:27:5c:40:1f:28:90:3d:d4:02Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
L:\Daten.NTG\_User\_Kress\Visual Studiuo\gCode Generator Windows Forms-App\gCode Generator Windows Forms-App\obj\Release\gCode Generator.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 233KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 220KB - Virtual size: 219KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ