dfsvc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0718dc18ea393a4f4daf12bdf5702910_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0718dc18ea393a4f4daf12bdf5702910_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
0718dc18ea393a4f4daf12bdf5702910_NeikiAnalytics.exe
-
Size
606KB
-
MD5
0718dc18ea393a4f4daf12bdf5702910
-
SHA1
be0fb1ec82ba4e5b909a86a45d59853c0e127785
-
SHA256
fe8ee7e144bc611f171ef95e8017f46cb4fe7f0a6c7a13918ae79db8e75e691d
-
SHA512
46e2d0fa3af6bd85bca1f75376ea300bf46abf666a8413b8e7eb119b4bc6499e7811f75490734ac0abd6cb9973f008b80aae2bd9ad5f70c2d8753d2e1d21664c
-
SSDEEP
12288:9nlqwJ5luGENZMkY8pJy6JKpdGyy5kAlHOswKgiTWpCr:9nlqKluJJNK/Ry5k4HOsRgiip
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 0718dc18ea393a4f4daf12bdf5702910_NeikiAnalytics.exe
Files
-
0718dc18ea393a4f4daf12bdf5702910_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ