C:\Documents and Settings\pbenaim\Mes documents\~WirelessTime3.1\WirelessTimeDo\obj\Release\WirelessTimeDo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
20fd77743947d2c2a570ad93e5e35fb977e445bea0cc8f2cac0385b228471a81_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
20fd77743947d2c2a570ad93e5e35fb977e445bea0cc8f2cac0385b228471a81_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
20fd77743947d2c2a570ad93e5e35fb977e445bea0cc8f2cac0385b228471a81_NeikiAnalytics
-
Size
39KB
-
MD5
637add91b885753fdb4195f537e50730
-
SHA1
206ecc2a8715c83098516533b48f63f7d79e7f93
-
SHA256
20fd77743947d2c2a570ad93e5e35fb977e445bea0cc8f2cac0385b228471a81
-
SHA512
25f112cd9c7835704cf75a3c9af4483a5b2fd4f67215b9e2d5ae5735e4ecf4d4c462854c1956d55424109c76305826dd101d794671c9514b2d3b482598597165
-
SSDEEP
768:cdVTtK7iqFxFkTRR5VJC2EqhTU209yALkv5OSt4cu8oKwyv:dFxFkTRR5V4XqBc4dcew
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20fd77743947d2c2a570ad93e5e35fb977e445bea0cc8f2cac0385b228471a81_NeikiAnalytics
Files
-
20fd77743947d2c2a570ad93e5e35fb977e445bea0cc8f2cac0385b228471a81_NeikiAnalytics.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 163B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ