C:\Data\Karolyn\code\InstallHelper\Release\InstallHelper.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1d1f9b633d505944ffa24da6c130de80_NeikiAnalytics.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1d1f9b633d505944ffa24da6c130de80_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
General
-
Target
1d1f9b633d505944ffa24da6c130de80_NeikiAnalytics.exe
-
Size
8KB
-
MD5
1d1f9b633d505944ffa24da6c130de80
-
SHA1
43ccc237033a04ce544cc683aaf976d3274fbcb6
-
SHA256
98f107a396e314bfc9e10a28e1ce6926036b704f519cf58921b313138054ac9a
-
SHA512
2e02ca9f22a26c8b03d4db6f975de78090139990898694d823d5a1151416f15654385a3e3f661bd32b0be53ff4e674fbce14d01865b7d4c52289cb5cfa9de59c
-
SSDEEP
96:0B5hKEEXJL+SSDDpUt5pkYVTZJGY5WJz/P1jO6M14UQOMmYzx:8LrEXJL+PIpkyZJbWJzP1jOuU3Ml
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d1f9b633d505944ffa24da6c130de80_NeikiAnalytics.exe
Files
-
1d1f9b633d505944ffa24da6c130de80_NeikiAnalytics.exe.dll windows:6 windows x86 arch:x86
33e6da6587808a495b0d10062bca7c74
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
vcruntime140
__std_type_info_destroy_list
memset
_except_handler4_common
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_cexit
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_narrow_environment
kernel32
InitializeSListHead
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
IsDebuggerPresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 316B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ