D:\Develop\One-Core\Output\Output-MSVC-i386\msvc_pdb\Debug\api-ms-win-core-kernel32-private-l1-1-1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
43cd3f0c31264dd17c09db75b8194d50_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
43cd3f0c31264dd17c09db75b8194d50_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
43cd3f0c31264dd17c09db75b8194d50_NeikiAnalytics.exe
-
Size
3KB
-
MD5
43cd3f0c31264dd17c09db75b8194d50
-
SHA1
5d769ae45a438fc68ed19730af520adeecf82cf3
-
SHA256
1b41723f2c238726f4b928af8147fe30516bcb1cae08fa4e9c934623e266db8f
-
SHA512
c0a2490bff9ca8a2c0f8097cb4e13f261140a34b14ab7a5fac00e3e54db8e7d3597b50a04650585de6d7f838748fc879d402bf149ba487ebb838759503b5b9ab
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43cd3f0c31264dd17c09db75b8194d50_NeikiAnalytics.exe
Files
-
43cd3f0c31264dd17c09db75b8194d50_NeikiAnalytics.exe.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Exports
Exports
PrivCopyFileExW
Sections
.rdata Size: 512B - Virtual size: 344B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ