c:\Users\square\Subversion\cs_mfbot\trunk\MFBot Redesign\obj\Debug\MFBot.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6cb46ad5b5f2e15a277d735b5678bbb0_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6cb46ad5b5f2e15a277d735b5678bbb0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
6cb46ad5b5f2e15a277d735b5678bbb0_NeikiAnalytics
-
Size
8.8MB
-
MD5
6cb46ad5b5f2e15a277d735b5678bbb0
-
SHA1
b3c96e50f50825aaace9e7fe0de69dedaf929218
-
SHA256
460e6e4d2cb3243cf06ceb9499329474df6b14f4f7b17c3e09fc158c1e9da315
-
SHA512
26b67972d8b77091f8b2ccea934653fc26f00b36dff3975854c3127d580205d0c7811b052583f6ac4a4a1e63f4588a5570c5468ca294a6c4f483c8dc187eefe5
-
SSDEEP
98304:FAT+H1zbHC6d5qnAmP7qvZcrYRKskkEauzIIGAz8cspdpRBOgnWc+VEYAhY:f+AIWvRRx9uzIIGeEd5fnC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6cb46ad5b5f2e15a277d735b5678bbb0_NeikiAnalytics
Files
-
6cb46ad5b5f2e15a277d735b5678bbb0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 8.7MB - Virtual size: 8.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ