e:\pi1009\Build\Celadon\RELEASE_VS2012x86\IA32\AgesaModulePkg\Fch\Shasta\FchShastaSmbusPei\Smbus\DEBUG\FchSmbusPei.pdb
Static task
static1
Behavioral task
behavioral1
Sample
07cfc99b483e84c865ac6d53e0e6a1eb2f9cdf37573212fe11d085b09733de23_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
07cfc99b483e84c865ac6d53e0e6a1eb2f9cdf37573212fe11d085b09733de23_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
General
-
Target
07cfc99b483e84c865ac6d53e0e6a1eb2f9cdf37573212fe11d085b09733de23_NeikiAnalytics.exe
-
Size
3KB
-
MD5
35867d8e352808ef57d1f0f4fb153310
-
SHA1
0509599c503fc042ddc4c57c8e0f7653dad8dc86
-
SHA256
07cfc99b483e84c865ac6d53e0e6a1eb2f9cdf37573212fe11d085b09733de23
-
SHA512
468e7a4b5ec7d0a15efca1186dc77b427b1df66672c7a7d159403e7c8dd8eca798e098f80a214796dc0653252cc743b610a177ca0598d25942effdfe9ff4bd8a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07cfc99b483e84c865ac6d53e0e6a1eb2f9cdf37573212fe11d085b09733de23_NeikiAnalytics.exe
Files
-
07cfc99b483e84c865ac6d53e0e6a1eb2f9cdf37573212fe11d085b09733de23_NeikiAnalytics.exe.dll windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 352B - Virtual size: 328B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 64B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ