C:\Users\info\source\repos\ClanWarWindow2\ClanWarWindow2\obj\Debug\net8.0-windows\ClanWarWindow2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e852e8f871ebadf697a2b86781af7c60_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e852e8f871ebadf697a2b86781af7c60_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
e852e8f871ebadf697a2b86781af7c60_NeikiAnalytics.exe
-
Size
60KB
-
MD5
e852e8f871ebadf697a2b86781af7c60
-
SHA1
b0417e81bd35961eec6b4a9f81caad35d03c39e5
-
SHA256
5a6a50b017a17235b553be0909e4dc2d764ee2fc05f63771d1123665603c0694
-
SHA512
edc6b00f3afa9fa87dfdca1328836026999e2c59e639865f43e18d75c1cf5d632955fb6846bfb3dc1515a418125ecf575f6c41ef33d01d8b8fc33d050e925f95
-
SSDEEP
1536:NtAPpgqY9+0Q4ndWYvqYBxvNstvFeCxlzMi64AKFfnQuMiU:N6P2z9+430tvACxXFfDRU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e852e8f871ebadf697a2b86781af7c60_NeikiAnalytics.exe
Files
-
e852e8f871ebadf697a2b86781af7c60_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ