D:\Examlizhijie\ExamManage\ExamManage\ExamManage\obj\x86\Debug\ExamManage.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6b54baa34ce2a2e91c4621068384492ccccfc0d2a38e5d7e014fe3655b8587a6_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
6b54baa34ce2a2e91c4621068384492ccccfc0d2a38e5d7e014fe3655b8587a6_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
6b54baa34ce2a2e91c4621068384492ccccfc0d2a38e5d7e014fe3655b8587a6_NeikiAnalytics.exe
-
Size
19KB
-
MD5
057765f38e9a59025cc1b5876e7e0c10
-
SHA1
0b3e877d18d0be66ff0156861a17e3bfadf5356c
-
SHA256
6b54baa34ce2a2e91c4621068384492ccccfc0d2a38e5d7e014fe3655b8587a6
-
SHA512
196bc049d774ac981037145eff05d4bcafdcc83d95ba5cb4be3eda2c622bf3537ee84f266e1c05e6705a595b055a8aaea589b154110223f123c523ba132af8bf
-
SSDEEP
384:tf8JfmVke09Yb9hBB71ZduEjK01wFb/sELCS+nWvqMXj43g5WV:tXBlj5O1R+nGBo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b54baa34ce2a2e91c4621068384492ccccfc0d2a38e5d7e014fe3655b8587a6_NeikiAnalytics.exe
Files
-
6b54baa34ce2a2e91c4621068384492ccccfc0d2a38e5d7e014fe3655b8587a6_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ