p:\Target\x86\ship\setuptools\x-none\Flattener.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0aab48d5cfc30fd85bd62f9facd2ffb0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0aab48d5cfc30fd85bd62f9facd2ffb0_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
0aab48d5cfc30fd85bd62f9facd2ffb0_NeikiAnalytics
-
Size
819KB
-
MD5
0aab48d5cfc30fd85bd62f9facd2ffb0
-
SHA1
9c7c358a2d13794d980ec3ca7c745078e7c0255a
-
SHA256
fc6690d8a687a3a8a1e82287c6854d7b05c241ba74e251154a918c01d6c09673
-
SHA512
1905cd288f45a3844428a79e80a69fc68229b90a32d3c3c47bfdb07c74017d7beb87c5dacf31fa3abb4c4a855c0d110dcf9c6762b9d2fb21ebea90dea4d02466
-
SSDEEP
6144:m2wocRujoR2IOJxkXbyjUWAZyVVTG6xmlp+NgR8mwnSAOY5o2TB63ov:m2wxRu1IgekVt4ldRNwnSa9TB63Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0aab48d5cfc30fd85bd62f9facd2ffb0_NeikiAnalytics
Files
-
0aab48d5cfc30fd85bd62f9facd2ffb0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ