Static task
static1
Behavioral task
behavioral1
Sample
84461f3bb48d447fc75905513679cdf0_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
84461f3bb48d447fc75905513679cdf0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
84461f3bb48d447fc75905513679cdf0_NeikiAnalytics
-
Size
731KB
-
MD5
84461f3bb48d447fc75905513679cdf0
-
SHA1
c14c48bcee066f1d5f087653497d247b42b6007d
-
SHA256
c0440290440c8170358bcc40f3eb6c20aaee9299f1bddc94e4f3f4457bb7730c
-
SHA512
b6ac1621c1d645acac8e73999d569382436174bdde2640c762af46a1a545553bcb1ccd78081ac3c7ac3cbcf763409e0c197e02a563b133887359aeb9ea1306b4
-
SSDEEP
12288:+VDR7BfBdvxTDpZxdwxDKG89XLIKuNi+iLxxjUqoEyxLRAlajDPbWif5cWoXju4G:+DXjT1jdwxD789XMJNi+GxxvohlDzWnk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84461f3bb48d447fc75905513679cdf0_NeikiAnalytics -
NSIS installer 2 IoCs
resource yara_rule sample nsis_installer_1 sample nsis_installer_2
Files
-
84461f3bb48d447fc75905513679cdf0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ