C:\Jenkins\workspace\com.att.uvmserv\Windows_Build\main\Release\x86\es\NetFW.resources.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0d4667bf0c3a8d2dc4e01bc5e1ebc8b9db8cbecc579468052ae5aa49e49ac74c_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0d4667bf0c3a8d2dc4e01bc5e1ebc8b9db8cbecc579468052ae5aa49e49ac74c_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
0d4667bf0c3a8d2dc4e01bc5e1ebc8b9db8cbecc579468052ae5aa49e49ac74c_NeikiAnalytics.exe
-
Size
117KB
-
MD5
36fdeab2ee65523c846e44a59e9182c0
-
SHA1
b16b8d865cc8f6d55c8f48be3c588ebab0d528dc
-
SHA256
0d4667bf0c3a8d2dc4e01bc5e1ebc8b9db8cbecc579468052ae5aa49e49ac74c
-
SHA512
4704a71352a65467098d5f649da095c91c7c800cf66d207e0a1cca542d7edc533e1f02c6c16a54ad4c2cff497cc88cdb6961b8fc8fa0909d65550ca015064c3b
-
SSDEEP
3072:jG3/zphFKF5/gJRSQaoJ1Uzrd/rreasyBX/rU:jGbph/c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d4667bf0c3a8d2dc4e01bc5e1ebc8b9db8cbecc579468052ae5aa49e49ac74c_NeikiAnalytics.exe
Files
-
0d4667bf0c3a8d2dc4e01bc5e1ebc8b9db8cbecc579468052ae5aa49e49ac74c_NeikiAnalytics.exe.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Sections
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ