F:\Pr\MemOffset (1)\Last\ConsoleApp1\obj\x64\Release\mem.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9962e5b1a4a96c9e4257d49c09c949a0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9962e5b1a4a96c9e4257d49c09c949a0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
9962e5b1a4a96c9e4257d49c09c949a0_NeikiAnalytics.exe
-
Size
52KB
-
MD5
9962e5b1a4a96c9e4257d49c09c949a0
-
SHA1
14f2b1f6eb0261f4ff78f16341bf7bfc45b5e0ee
-
SHA256
c54f6b7b442bc7e9536aec0fa7f1139ce641cc29ad8f2e37014032c667dd2cfe
-
SHA512
f0cb56abbbc945a4265e56e89c2b14d15f7545007d84d1a36255177c0e8b0881385fb18b6697d2427ace2ab4fcf078071a019c46100d1eae6de4bf5bd6203e1b
-
SSDEEP
1536:rhjP1StdS/kDepM4DfYseiFySBlIUblm6lDvJfxPjTPi9odUawVcl:rhL1eqO4ssBySBlIUblm6lDvJfxPjTqq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9962e5b1a4a96c9e4257d49c09c949a0_NeikiAnalytics.exe
Files
-
9962e5b1a4a96c9e4257d49c09c949a0_NeikiAnalytics.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ