C:\WS-LTC10\Maintenance\2014_04_GA\AHTNET\AHT\UI\Controls\AHTResInterviewMain\obj\Debug\AHT.UI.Controls.AHTResInterviewMain.pdb
Static task
static1
Behavioral task
behavioral1
Sample
54376ec55fdbcf8a514252b3ef62bb469dfecd34ae8f7baadb632223606078f7_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
54376ec55fdbcf8a514252b3ef62bb469dfecd34ae8f7baadb632223606078f7_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
54376ec55fdbcf8a514252b3ef62bb469dfecd34ae8f7baadb632223606078f7_NeikiAnalytics.exe
-
Size
35KB
-
MD5
363167ae43f35f44ecd44a49b771b410
-
SHA1
054ebf6f11702e45ebb9e4a58f8b4a5d2c88787a
-
SHA256
54376ec55fdbcf8a514252b3ef62bb469dfecd34ae8f7baadb632223606078f7
-
SHA512
97cdac7a5e65c22fd472161cf320fd349c749c6c78081c6edb4ee62ff80edde7e8367cf23fa19d1868fbf0722baad3e2462cadfe517f8e0c2c10b22f020e28df
-
SSDEEP
384:2mV0WSYXlNjrKKt8u+Eoe9t+4Qi8fWUifpN8kD7IQPrFcwaCv0Dyk2xf7rdLyzCJ:VXlN3Ht8ux1t8fAfUkD7IQRcBkxpT1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54376ec55fdbcf8a514252b3ef62bb469dfecd34ae8f7baadb632223606078f7_NeikiAnalytics.exe
Files
-
54376ec55fdbcf8a514252b3ef62bb469dfecd34ae8f7baadb632223606078f7_NeikiAnalytics.exe.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ