caspol.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c23b8489cccb437aad93b7988d27e9a0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
c23b8489cccb437aad93b7988d27e9a0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
c23b8489cccb437aad93b7988d27e9a0_NeikiAnalytics
-
Size
4.8MB
-
MD5
c23b8489cccb437aad93b7988d27e9a0
-
SHA1
91e90f5eb42a875c8a3e933d903b757a0730dad6
-
SHA256
47c379e8fdc360aa05c9ee918d87f23311eade7283c423ed007bae22be280ce6
-
SHA512
cde45174f7a0b163528637f5740b08b0a54ff8e888c73d23d4c513b1b475bd1cde8519063779d3db09a8f466ebd39d72bbcb3673c94041b7f21ccba50a9697a1
-
SSDEEP
49152:qvbPKdPKkiEOEBitoPKjVHgOGf00Th1K+JLtiQvv9WGLBy+lIvbu32MyToutyoQY:EkPpuHgO50K+JLtiQHkmy1y3JyZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c23b8489cccb437aad93b7988d27e9a0_NeikiAnalytics
Files
-
c23b8489cccb437aad93b7988d27e9a0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ