Static task
static1
Behavioral task
behavioral1
Sample
3ce35bce29326e16523d9c65cf879e00_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3ce35bce29326e16523d9c65cf879e00_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
3ce35bce29326e16523d9c65cf879e00_NeikiAnalytics
-
Size
1.1MB
-
MD5
3ce35bce29326e16523d9c65cf879e00
-
SHA1
84895a829f31505dac5dd7b80709595bbb027d95
-
SHA256
054c162646cad4a1ecf71a4d102c058f69e259dd02ef98c55cf5a452fda0cacf
-
SHA512
49527a30653abd16c1dc64e4ce78033b7970330862780db437984ea789892d7652a2daba71230255c13b308738ceeaa739fca0a671737d7536248b8e7f960936
-
SSDEEP
12288:40w1AeddoTaCistvvvKc49rtSJ3r2SUaXy0x0fMqMj3sQ82KsgY805ufxBetQtlX:WhCiOvvvg1tSNSSf5j3h180BCtq2HCLs
Malware Config
Signatures
Files
-
3ce35bce29326e16523d9c65cf879e00_NeikiAnalytics.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
11:09:54:92:34:3f:4a:99:4b:57:d0:8d:47:da:57:09Certificate
IssuerCN=Anton\\Anton_KNot Before06/02/2024, 19:06Not After06/02/2025, 01:06SubjectCN=Anton\\Anton_K46:e0:ee:5e:56:0a:5a:31:67:ab:77:bb:2b:91:43:65:38:8d:2d:6b:0f:13:88:a4:09:e8:e0:5b:0f:5e:26:42Signer
Actual PE Digest46:e0:ee:5e:56:0a:5a:31:67:ab:77:bb:2b:91:43:65:38:8d:2d:6b:0f:13:88:a4:09:e8:e0:5b:0f:5e:26:42Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\Anton_K\Desktop\GasDynamicFrac_Pro\WindowsFormsApp1\obj\Release\WindowsFormsApp1.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ