c:\Projekty\vch2005\Flightscope.Encoder - GIT\Encoder\obj\x86\Debug\Flightscope.Encoder_PCR_FTDI_WS020.pdb
Static task
static1
Behavioral task
behavioral1
Sample
248c187e5b7097bbedbdaa274b0b5320603a48de4fbe29d478e8347a4aac7e41_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
248c187e5b7097bbedbdaa274b0b5320603a48de4fbe29d478e8347a4aac7e41_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
248c187e5b7097bbedbdaa274b0b5320603a48de4fbe29d478e8347a4aac7e41_NeikiAnalytics.exe
-
Size
446KB
-
MD5
8c6819083b8e6600b74f8bc8007050d0
-
SHA1
fd0bf077273573a9e14308e69621b50f98ddbcd2
-
SHA256
248c187e5b7097bbedbdaa274b0b5320603a48de4fbe29d478e8347a4aac7e41
-
SHA512
5c1d46e3f78fa957d3fa77b0c7ef20df9f4e037ed72280c04ab9b69a6ac85179ad8953fe196bb6467f7b49658d1f5cec6b6a2e0991060b451f1cba0a3c9351e8
-
SSDEEP
6144:/7c8mzZbaoZ/uy6bZcScCaxx534A1WjWfy/v3JcqMJ7I19c:/cZbaYD7Fx534A1QWFqMJ7I0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 248c187e5b7097bbedbdaa274b0b5320603a48de4fbe29d478e8347a4aac7e41_NeikiAnalytics.exe
Files
-
248c187e5b7097bbedbdaa274b0b5320603a48de4fbe29d478e8347a4aac7e41_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 411KB - Virtual size: 411KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ