d:\veb\for_test\sa50216\s0xkt68a_1006_lem\s0xkt68a\Build\NeonCity\RELEASE_VS2015\IA32\PurleySktPkg\Me\Heci\MeUma\MeUma\DEBUG\MeUma.pdb
Static task
static1
Behavioral task
behavioral1
Sample
84de37467038e6d8b11eeb5f2f819060_NeikiAnalytics.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
84de37467038e6d8b11eeb5f2f819060_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
84de37467038e6d8b11eeb5f2f819060_NeikiAnalytics.exe
-
Size
4KB
-
MD5
84de37467038e6d8b11eeb5f2f819060
-
SHA1
dc02469a69fb63d44f86edf91f72041ed7f4edf6
-
SHA256
e01602d8a391564cce5ce2f51c7e4e9afbb15fab4e19c4466afbce4916f3e0e1
-
SHA512
2422b678a498fbc516744cf85fc61b141aebdf154f8aa526853e490d0024fd41b9cd06195934ddc07ff3e0e201ea1f899f0133682f11c8e78885696aad5efcc7
-
SSDEEP
96:2ZE06yXLJnORfHHjEeuxphgaBcIm2PxsWxIy0DN8aeu:2Zn57JnuHIeuThgkcIm2SDN8a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84de37467038e6d8b11eeb5f2f819060_NeikiAnalytics.exe
Files
-
84de37467038e6d8b11eeb5f2f819060_NeikiAnalytics.exe.dll windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 608B - Virtual size: 596B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 96B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ