c:\fumdrv64\rindimg\objfre_wnet_AMD64\amd64\M5550PWI.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e62536dc7ed1579e116e4bd2c8044750_NeikiAnalytics.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e62536dc7ed1579e116e4bd2c8044750_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
General
-
Target
e62536dc7ed1579e116e4bd2c8044750_NeikiAnalytics
-
Size
2.2MB
-
MD5
e62536dc7ed1579e116e4bd2c8044750
-
SHA1
2617f0d93c967ba3d358da67e478a89cdc727ec9
-
SHA256
fd44cf4f5d8e8c8ed48b21769754d8bc59cfb05a4de4c359fedce6343fdcf22f
-
SHA512
ab9dfa024a5470381de2178553ef6768a2eb10ef4f3c2cb6e74411c3c1e4e44f00ead84bb67095cbe71d9f2e078fd6aa0e2fc5a65f58351275722d9a421bf3cd
-
SSDEEP
6144:fllXL7vsdWihbb+5Ni10a0ymRDm2Ge+atr4QNm+bQAcJAJAJadMdwB/BqtQoB5BR:9lXL73VtiCm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e62536dc7ed1579e116e4bd2c8044750_NeikiAnalytics
Files
-
e62536dc7ed1579e116e4bd2c8044750_NeikiAnalytics.dll windows:5 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Exports
Exports
DllInitialize
Sections
.text Size: 512B - Virtual size: 237B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ