E:\PROJECTSNET.BNEW\RedistributableApplicationsObf\RSRegistrator\obj\Release\Nevron.RSRegistrator.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e3779e29d2d2eed25f2b059a84762190_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e3779e29d2d2eed25f2b059a84762190_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
e3779e29d2d2eed25f2b059a84762190_NeikiAnalytics
-
Size
160KB
-
MD5
e3779e29d2d2eed25f2b059a84762190
-
SHA1
0e2ed53e41618c124142f15a21b678ada08bac15
-
SHA256
af9e3a02f398c5e5de22a50ab542acada253a51b33f38eccdef6713b4d928739
-
SHA512
67b45769a79c46c35799417f816b7c937811a55d8e9d1a8938f880afc4a320b974a98a0624c6bf0a6adb81dcc388c3a668f7838766ea1d09d136f310a5d61a78
-
SSDEEP
1536:eLBUWFOky75F/02u/rZYdkgGrzeQKeUWFq1E9MyLZ2ULqTnQ2TSCz:eLBeu/rZtgGrKQK7WVMyZ2ULqVN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e3779e29d2d2eed25f2b059a84762190_NeikiAnalytics
Files
-
e3779e29d2d2eed25f2b059a84762190_NeikiAnalytics.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 148KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ