D:\workSpace\tytylive\LSLive\obj\x64\Debug\LSLive.pdb
Static task
static1
Behavioral task
behavioral1
Sample
115eadd8118bcce5608dcd54ab88d860_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
115eadd8118bcce5608dcd54ab88d860_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
115eadd8118bcce5608dcd54ab88d860_NeikiAnalytics
-
Size
4.7MB
-
MD5
115eadd8118bcce5608dcd54ab88d860
-
SHA1
8c9f4a45743643d75a56dd8a4b330b9d72f0fb4b
-
SHA256
b4528d86bb944e6e2b858429e42a824820c3d5201f9c75c4f5021b2abecd0210
-
SHA512
27f9d10f3415a6e692849aa0392e2a67c0715c3fce0f178c5178541edc6e3aa0251d3ec351100c2ac257b8b1d1958edb4bda3db751356899ea8c7bd4bd3a1a18
-
SSDEEP
49152:8vJ10Fv6aVPy7xyhP/bMrpNQKrYApZlKvtmnIPB92ZbkY74X5LsIt:8vJuP6xyhXgbQKdRb1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 115eadd8118bcce5608dcd54ab88d860_NeikiAnalytics
Files
-
115eadd8118bcce5608dcd54ab88d860_NeikiAnalytics.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 4.7MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 892B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ