E:\JOB\CRAFT\トラック\デモ用\TruckDemo\TrucDemo02-temp15\TruckTest11\obj\x86\Debug\TruckTest11.pdb
Static task
static1
Behavioral task
behavioral1
Sample
73ed9d25ca082a75afbf30e10fd67c80ec9e5fcdefd50234c78e6ebd5d5e352d_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
73ed9d25ca082a75afbf30e10fd67c80ec9e5fcdefd50234c78e6ebd5d5e352d_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
73ed9d25ca082a75afbf30e10fd67c80ec9e5fcdefd50234c78e6ebd5d5e352d_NeikiAnalytics.exe
-
Size
569KB
-
MD5
91fbf8492dd2bd1d226bc06c2a0ad790
-
SHA1
8b6d6b1a7af630fd3768a04dd5cf663e060d81f7
-
SHA256
73ed9d25ca082a75afbf30e10fd67c80ec9e5fcdefd50234c78e6ebd5d5e352d
-
SHA512
7d5c5963a244334a18cbd0e4cb4d286373dc8f93cfd5e63e15c4feb28a0d9edab7518c8b6a5465dcd0d5976d54fcdc32144b53b86df9f7e540dac2ac97688872
-
SSDEEP
6144:9qMIiD98LkOB8zU2ocQhUIFWUMEqkpe9BTv9sCuuuuuuuNpMy4FWmHP5t6jYVcUN:px34WUMEcB9NuuuuuuuB4FW0P5QC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73ed9d25ca082a75afbf30e10fd67c80ec9e5fcdefd50234c78e6ebd5d5e352d_NeikiAnalytics.exe
Files
-
73ed9d25ca082a75afbf30e10fd67c80ec9e5fcdefd50234c78e6ebd5d5e352d_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 567KB - Virtual size: 566KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ