e:\C#exercise\Arrange\Arrange\obj\Debug\Arrange.pdb
Static task
static1
Behavioral task
behavioral1
Sample
26ffbff7d69bb0e549bc3484a81c1480_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
26ffbff7d69bb0e549bc3484a81c1480_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
26ffbff7d69bb0e549bc3484a81c1480_NeikiAnalytics.exe
-
Size
37KB
-
MD5
26ffbff7d69bb0e549bc3484a81c1480
-
SHA1
c0b23fe2588280af1ee184a528a4352fbcc7acc0
-
SHA256
ce8eddeb3f8250704a78864ae28d8ace2b1abc66295912824b527fbf53ee0415
-
SHA512
aedcbb94152e11b8d1410a7d07a96c4533c13c4ef6e4da7a49da6d02d57c6cd203cf7551ee0666daa7b245ffc3401199fdc915f44fbaf0a780857ca349df82f0
-
SSDEEP
384:V275Hk8kvwKwq6uHWyN7mSqFiVHQRTL3r9gLiT+8cxS4mgytssbR7mjUhoWE:gHLyQSqFIHQRD9gLisxtmZxg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26ffbff7d69bb0e549bc3484a81c1480_NeikiAnalytics.exe
Files
-
26ffbff7d69bb0e549bc3484a81c1480_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ