e:\引流宝\searchFrom\obj\Release\查询工具.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b2f6b2036e965c59bda684296de86a98580f8f9512064ce3ed653abf01c43f67_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b2f6b2036e965c59bda684296de86a98580f8f9512064ce3ed653abf01c43f67_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
b2f6b2036e965c59bda684296de86a98580f8f9512064ce3ed653abf01c43f67_NeikiAnalytics.exe
-
Size
500KB
-
MD5
5c55bc6cc8178e4d0e64b9184df436a0
-
SHA1
f5362de45925460d5a037e60194827ea56d15b2f
-
SHA256
b2f6b2036e965c59bda684296de86a98580f8f9512064ce3ed653abf01c43f67
-
SHA512
883eca1960fb3bf866c636798b4850506686c1bbf013ee1ad126bae05d3116b9bd58ede0cdcce41b780ccb0d46b4bcfd664c2fc5cabeefb6d443b28e9ef7c74f
-
SSDEEP
6144:rl+KuYg48a0VTuiSCfC1LiK4Q48mY2mQ48B/yZ8R8d8R8H8R8U8R8dxk5HuGkk9x:r84GK4N8dN8HeBu0/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2f6b2036e965c59bda684296de86a98580f8f9512064ce3ed653abf01c43f67_NeikiAnalytics.exe
Files
-
b2f6b2036e965c59bda684296de86a98580f8f9512064ce3ed653abf01c43f67_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 497KB - Virtual size: 497KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ