G:\新建文件夹\加密文件夹\工程E盘\obj\x86\Debug\美女图集.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2803ac7adba950625ede294c962757d2d53602b5dd996b258d523bd1cfde6751_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2803ac7adba950625ede294c962757d2d53602b5dd996b258d523bd1cfde6751_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
2803ac7adba950625ede294c962757d2d53602b5dd996b258d523bd1cfde6751_NeikiAnalytics.exe
-
Size
4.2MB
-
MD5
49d641a768a2ebe185cf6c7458f01090
-
SHA1
e513ef656b7ed86805585767351d8afa44e61bcf
-
SHA256
2803ac7adba950625ede294c962757d2d53602b5dd996b258d523bd1cfde6751
-
SHA512
e4fa8f35e019e7584b24134aff34bb3ec5cf94e3b6aa67032d848347f8970ea88d30156f090c128c3549492513bfa9e795fb4b5b91b4e076c31d3e79e678be56
-
SSDEEP
98304:udZq1KegrvJumuMvppG+txSz7v7zFf2ecVNX1MEcdF:udogBJumBzG4xS/v12vFMEc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2803ac7adba950625ede294c962757d2d53602b5dd996b258d523bd1cfde6751_NeikiAnalytics.exe
Files
-
2803ac7adba950625ede294c962757d2d53602b5dd996b258d523bd1cfde6751_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ