Static task
static1
Behavioral task
behavioral1
Sample
5b1cde7d5dcb72387a9b3e53d72007c0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5b1cde7d5dcb72387a9b3e53d72007c0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
5b1cde7d5dcb72387a9b3e53d72007c0_NeikiAnalytics
-
Size
988KB
-
MD5
5b1cde7d5dcb72387a9b3e53d72007c0
-
SHA1
516ef2dcf76fde8065be5a1bea097183849446a9
-
SHA256
6ec078d047687748bfe7928bb222617d3e27c4bddda08ed971eab65fe8021237
-
SHA512
74adf186eb860007f1ef78f5339fedab9c7e0ca3ccba037de1a1826f5e5060d6345e77bb82a130fc27791a64ee15a97ae94fec7b8f5f2f3a310141ef29e8b646
-
SSDEEP
24576:GScZ4k8XMksLPFIhuZtrRIjf23aJh7TU2ntk:GSc2k8XaLgoP3aJh7Ztk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b1cde7d5dcb72387a9b3e53d72007c0_NeikiAnalytics
Files
-
5b1cde7d5dcb72387a9b3e53d72007c0_NeikiAnalytics.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 947KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ