d:\Develop\AddOns\Services\Storage\MatrixWS\Develop\SystemService\MatrixWSImportService\obj\Release\MatrixWSImportService.pdb
Static task
static1
Behavioral task
behavioral1
Sample
85633643d9f84f75dc61d06d8907bae0_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
85633643d9f84f75dc61d06d8907bae0_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
85633643d9f84f75dc61d06d8907bae0_NeikiAnalytics.exe
-
Size
31KB
-
MD5
85633643d9f84f75dc61d06d8907bae0
-
SHA1
a1d27e3ee5b29af0197badd6381af2784f0e1b80
-
SHA256
889ca8a6bafe853fd12970f88257f6d39785e5dd2eb963e036a85121fe397102
-
SHA512
b25ef9f7fd5fb227951a4210418eb6bf5da9dd12a2aa6780ceef2ed176632143e59ed485f65277049482f886bc1ed62baaf22f325fff791d3061a5333b4c85d7
-
SSDEEP
192:NZRaBFydXz16ZB+kWmwcIIBAn94R3xfiaRNezxznwdvFYSaHTd+2edXdvPxzz:NZEvEXz16ZB+klr7L3xDszVwZqg2eHH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85633643d9f84f75dc61d06d8907bae0_NeikiAnalytics.exe
Files
-
85633643d9f84f75dc61d06d8907bae0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ