d:\Users\Justin\Documents\Visual Studio 2013\Projects\Heaven\Heaven\Heaven\obj\x86\Release\Heaven.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1bfd69f69850753ecaea19dfeafe83fb52ff3c39dbaa57fabb95a2b407220d46_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1bfd69f69850753ecaea19dfeafe83fb52ff3c39dbaa57fabb95a2b407220d46_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
1bfd69f69850753ecaea19dfeafe83fb52ff3c39dbaa57fabb95a2b407220d46_NeikiAnalytics.exe
-
Size
84KB
-
MD5
1009db526c966fa7c25cb81ce90419a0
-
SHA1
ebfb8c50e1ab2ed4c5f82bbb6e2fc0fbba7bb5ee
-
SHA256
1bfd69f69850753ecaea19dfeafe83fb52ff3c39dbaa57fabb95a2b407220d46
-
SHA512
f0c174abe11df40c07fb171fc882835695cac466e3d9354da3cc21c302051de62e861ae5f238fecb465a62b2f37a930dd09e9cbae3db865a10a4507d9e3ef01e
-
SSDEEP
1536:SK8ug/4upIAuutkuYZ9QYLxTG6sBvrJWhUALVS409OA8/4KqAfte7uZZeTR:SK8ug/4upIAuutkuYZ9QY9TGjzJALVS8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bfd69f69850753ecaea19dfeafe83fb52ff3c39dbaa57fabb95a2b407220d46_NeikiAnalytics.exe
Files
-
1bfd69f69850753ecaea19dfeafe83fb52ff3c39dbaa57fabb95a2b407220d46_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ