c:\Users\Freedom\Desktop\working 17 - 9 mir 2 code\test code\mir2-1.0.5.1 updated\Client\obj\Debug\Client.pdb
Static task
static1
Behavioral task
behavioral1
Sample
528ddb0adda472f7a830dcb396c29aa0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
528ddb0adda472f7a830dcb396c29aa0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
528ddb0adda472f7a830dcb396c29aa0_NeikiAnalytics.exe
-
Size
1.8MB
-
MD5
528ddb0adda472f7a830dcb396c29aa0
-
SHA1
eb182927b211d6416d5367c0be4e89d6db27071a
-
SHA256
258fa65e0d4667844fd018a0bbfd9ab41fd5a0d3bcf6e11c8f8615b95bbc6963
-
SHA512
26537d46eb10ec5d59b3f4868845de6094360f1205980c82c6149c1c770429c3fb7c20085bb947f54673c36092eff9d7d5c81ccda46112012220a5e837f09675
-
SSDEEP
24576:gTmp5Who0BWUIEsfohtKmirtsqirtsGG6x/q56LKYR+irts:gTmp5FSWUH/htKmQtsqQtsHTY8Qts
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 528ddb0adda472f7a830dcb396c29aa0_NeikiAnalytics.exe
Files
-
528ddb0adda472f7a830dcb396c29aa0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 265KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ