c:\faxman4\printdrivers\faxdrv\objchk_wnet_AMD64\amd64\F4Drv.pdb
Static task
static1
Behavioral task
behavioral1
Sample
375ec38dc230ea53a60444100ff33341a23edf6a4591b84e81e706647c7f7440_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
375ec38dc230ea53a60444100ff33341a23edf6a4591b84e81e706647c7f7440_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
375ec38dc230ea53a60444100ff33341a23edf6a4591b84e81e706647c7f7440_NeikiAnalytics.exe
-
Size
564KB
-
MD5
c0ab914fb32578edae093ed45f077880
-
SHA1
2794bf1301f3fa6be3441d3e699c2d9d16ffce3c
-
SHA256
375ec38dc230ea53a60444100ff33341a23edf6a4591b84e81e706647c7f7440
-
SHA512
a9daa604861f0d9f0ec5a0a9eccd063fcc009e500a76d1e8290adb45571dd4d6f725089e322b2d61cb96e411b21272d02ac0a1f5b5c6c74657e2ed70e95c7135
-
SSDEEP
6144:DniVKIPzdPwfoFSeiLM80RGa4lcx3ACQypANnyl1UU:DnikIPVwg8zYO1Ch
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 375ec38dc230ea53a60444100ff33341a23edf6a4591b84e81e706647c7f7440_NeikiAnalytics.exe
Files
-
375ec38dc230ea53a60444100ff33341a23edf6a4591b84e81e706647c7f7440_NeikiAnalytics.exe.dll windows:5 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Sections
.data Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 117B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ