C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\may\31\NAM\obj\Debug\NAM.pdb
Static task
static1
Behavioral task
behavioral1
Sample
554743b953d6144da8978a8565aac8b0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
554743b953d6144da8978a8565aac8b0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
554743b953d6144da8978a8565aac8b0_NeikiAnalytics.exe
-
Size
64KB
-
MD5
554743b953d6144da8978a8565aac8b0
-
SHA1
a31f75d8552495c6206112c2494909e1b780734c
-
SHA256
03ec0913224ab99f05ed49c7830c2cb43221723d38e2762c9b77c158a42b2234
-
SHA512
660f80be90effe7c1d9232da0e5b809b79c43b5ebfe7ab3fa62182f09823cb98f4ceb7b66579a459f0a2ba77823fad31e67e57e7aaacae354f0c98d92e90f1e4
-
SSDEEP
1536:Z3Ge+8Wz0+3IToY/scEY2IokXtebktZ61JhvjCBH:9GebWzh3IToYoeybkEhbCBH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 554743b953d6144da8978a8565aac8b0_NeikiAnalytics.exe
Files
-
554743b953d6144da8978a8565aac8b0_NeikiAnalytics.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ