C:\DEV\_Branch\K9\K9dev_jwei\src\Canine\obj\x86\Debug\Canine.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a2561116309a1a3889ca73e40beebbcea042783cc9e5e61e6c22d7291b8e94fe_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a2561116309a1a3889ca73e40beebbcea042783cc9e5e61e6c22d7291b8e94fe_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
a2561116309a1a3889ca73e40beebbcea042783cc9e5e61e6c22d7291b8e94fe_NeikiAnalytics.exe
-
Size
92KB
-
MD5
9ebfc15c9f8544da6388ec5ee01e30b0
-
SHA1
b3d6b1334d9977a97317548f96b2ff3d5ad2976c
-
SHA256
a2561116309a1a3889ca73e40beebbcea042783cc9e5e61e6c22d7291b8e94fe
-
SHA512
0c1618fa3ad47cd990cd7fc4a0af4ffc24c6a1dfa2fcdc6a42b3adaec31b82abe1d06f019a3bb21c52220f07d2089ee0cb52b65f4cffb0514367221ccd5acaf0
-
SSDEEP
1536:7tCuyO3FYMstPL54HbIeOOihbNtsqE7R82nH5+dqe7fGiFIX5tGqH3cPqHBKJhP9:7tCuyu6FwMelilNfE7S2nH5+dT7uiu5q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2561116309a1a3889ca73e40beebbcea042783cc9e5e61e6c22d7291b8e94fe_NeikiAnalytics.exe
Files
-
a2561116309a1a3889ca73e40beebbcea042783cc9e5e61e6c22d7291b8e94fe_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ