D:\a\Vixen\Vixen\src\Vixen.Modules\OutputFilter\DimmingFilter\obj\x64\Release\Module.OutputFilter.DimmingFilter.pdb
Static task
static1
Behavioral task
behavioral1
Sample
613e548d40242c66e3618f160df06b21db6650de3b5a721c4a319ab65147d741_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
613e548d40242c66e3618f160df06b21db6650de3b5a721c4a319ab65147d741_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
613e548d40242c66e3618f160df06b21db6650de3b5a721c4a319ab65147d741_NeikiAnalytics.exe
-
Size
12KB
-
MD5
0438eb9b205b2bb81f40052ac4e83c80
-
SHA1
4cddb92f7a1a790e2b346ada313b73e87c46db26
-
SHA256
613e548d40242c66e3618f160df06b21db6650de3b5a721c4a319ab65147d741
-
SHA512
c95c068202454be475a4ef6d3eb6c1ae32f7e11cf8f13ba58d545cf95db94ac172ea6143e162162a4e9e8f49373f9e7bc4797203b56305b9ea7b670fd93fa8d6
-
SSDEEP
384:FYkeC5nw+piQ2vTwki6BT9hKkfwDTAkyfVPxub5iY:KkeC5RwnvTtVJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 613e548d40242c66e3618f160df06b21db6650de3b5a721c4a319ab65147d741_NeikiAnalytics.exe
Files
-
613e548d40242c66e3618f160df06b21db6650de3b5a721c4a319ab65147d741_NeikiAnalytics.exe.dll windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ