E:\An4_2024\ER1_2024\2020\Code\EbixExchange\ServiceProcess\Aristotle\Aristotle\obj\Debug\Aristotle.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c6e72ed74b4a374c0ec29602eab2cd90_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c6e72ed74b4a374c0ec29602eab2cd90_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
c6e72ed74b4a374c0ec29602eab2cd90_NeikiAnalytics
-
Size
48KB
-
MD5
c6e72ed74b4a374c0ec29602eab2cd90
-
SHA1
b4fd956a30c16f201775c612f75a67a5fbdb2ebd
-
SHA256
d04c650064b3617c42fb39236845d7de10ed3c0a57b0e91609a45d72be20e2f7
-
SHA512
46ec8d002a729557553d9bb33fcfc8901fee7e838a2886833a13950f954f04216279e4b8cf25ccde1ece053695da75d6e738f408d24c33e73090275f4a13e9c3
-
SSDEEP
768:F50iPN/muXfVbwBTB28PH6qgFCUqDEON9kwsT:0adfJw9YYsT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6e72ed74b4a374c0ec29602eab2cd90_NeikiAnalytics
Files
-
c6e72ed74b4a374c0ec29602eab2cd90_NeikiAnalytics.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ