D:\匡劲松\工作目录\水电水利工程投标管理造价软件\版本管理\SDZJQD(2024升级改造)\DekManage\obj\x86\Debug\DekManage.pdb
Static task
static1
Behavioral task
behavioral1
Sample
195e1ad329cb849c5e0be300ad707600_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
195e1ad329cb849c5e0be300ad707600_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
195e1ad329cb849c5e0be300ad707600_NeikiAnalytics
-
Size
1.1MB
-
MD5
195e1ad329cb849c5e0be300ad707600
-
SHA1
13d4787d97ca2983cd714f3523bd2a6723d8dc8d
-
SHA256
f0f0fa1bb978e2959ae76099cd4a1f8e1c48cb298103ae0542ae99facacec24c
-
SHA512
2182648186f469b97ad578a42eb2d8a22c266c545f6718d4a0f41fe6fb60ab0a3155d8208a7943f6f25cea163c5a735525930d2d624ff080d064a28b85227d9f
-
SSDEEP
24576:7TpxI0tUFUellx8d6CEKYoO6d4ysZpAQaUfXDZJZcmqb2TV7rVFi:7TpxI9FUell2YoO6d4TpAQaUfXDZJZcj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 195e1ad329cb849c5e0be300ad707600_NeikiAnalytics
Files
-
195e1ad329cb849c5e0be300ad707600_NeikiAnalytics.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ