F:\agent\YEC-BLD01-01\_work\51\s\Sigma\Aplication\Modules\ProductInfo\Controls\obj\x86\Release\SWPlus.Modules.ProductInfo.Control.pdb
Static task
static1
Behavioral task
behavioral1
Sample
00f53154e49ea194d8cfb76a9ca495cbdfd1269873181eb31229fa71e09cbaae_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
00f53154e49ea194d8cfb76a9ca495cbdfd1269873181eb31229fa71e09cbaae_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
00f53154e49ea194d8cfb76a9ca495cbdfd1269873181eb31229fa71e09cbaae_NeikiAnalytics.exe
-
Size
10KB
-
MD5
e4e8cb12660b424495b66a2197f49de0
-
SHA1
0d033265675b7f208bd85e827cbb4d7cbbf3865d
-
SHA256
00f53154e49ea194d8cfb76a9ca495cbdfd1269873181eb31229fa71e09cbaae
-
SHA512
d6c1b2b8858741066f9021dba8b11dd88d0c5b3aad1f6d78852f76c0c85742d1eb3e885bfd9bcd563aa227b6b7b5e26db3ccff74398def26ffd1549a2f6f3a48
-
SSDEEP
192:bIvOQV+5j3X6KHSpNbYNVDMP1G+ldYogvOt9FsfYwX2W1dQI44f+e9V8fQAAH9dG:bZQejn6TBYwG+ldYogvOt9FQYwX2W1da
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00f53154e49ea194d8cfb76a9ca495cbdfd1269873181eb31229fa71e09cbaae_NeikiAnalytics.exe
Files
-
00f53154e49ea194d8cfb76a9ca495cbdfd1269873181eb31229fa71e09cbaae_NeikiAnalytics.exe.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ