F:\work\dartfish2024.U2\Bin\x64\Release\it-it\df_PlayerPlug.dll.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8a66864d713409c54a8344389f63e07b0881891b8b94b5b750ce640fbf5ff0ac_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8a66864d713409c54a8344389f63e07b0881891b8b94b5b750ce640fbf5ff0ac_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
General
-
Target
8a66864d713409c54a8344389f63e07b0881891b8b94b5b750ce640fbf5ff0ac_NeikiAnalytics.exe
-
Size
17KB
-
MD5
87f752ef77f44e4d4973c0f50e3de500
-
SHA1
bdcd835bb5717803fffc1dc09d682b963b97237b
-
SHA256
8a66864d713409c54a8344389f63e07b0881891b8b94b5b750ce640fbf5ff0ac
-
SHA512
4c1d01f39f6fed1764b7400b5709411c547f135916669f483471c4f7584a999da1ae208eda5eadcd7087842f6d50fc967411202c541079e997479568bac84376
-
SSDEEP
192:JEsg5Bdpppoi7/8Tet8+oDvl7+5lH1Ul5SdPxD:Cf5Bci7kG8+oDd7e0wZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a66864d713409c54a8344389f63e07b0881891b8b94b5b750ce640fbf5ff0ac_NeikiAnalytics.exe
Files
-
8a66864d713409c54a8344389f63e07b0881891b8b94b5b750ce640fbf5ff0ac_NeikiAnalytics.exe.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Sections
.rdata Size: 512B - Virtual size: 328B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ