Static task
static1
Behavioral task
behavioral1
Sample
85cdcfe2d40e95b5a3774662e8e92f30_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
85cdcfe2d40e95b5a3774662e8e92f30_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
85cdcfe2d40e95b5a3774662e8e92f30_NeikiAnalytics
-
Size
4.8MB
-
MD5
85cdcfe2d40e95b5a3774662e8e92f30
-
SHA1
6b3d7373e186e3f4d03b0b20e8a6edec7344e55a
-
SHA256
12dd062805da7f56f09be47e35a0e0594c2e5e02abf00a136315e7927a84b272
-
SHA512
813a2b30a71a2f96ce104cf6596eb506e8833197a05e5ea4acf8823ff909d4de29d0f9231093ded8c57707439cd6bc761368cc94b09f8fd15cf79c2672685661
-
SSDEEP
49152:VxucC0iCD9chakGOde+bj78BmNsgvsNBDN3bGAL17kVCykawvCuv0XUOBAuxhlON:jxb5TisNHG2eVpxsTeb9PfUWE7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85cdcfe2d40e95b5a3774662e8e92f30_NeikiAnalytics
Files
-
85cdcfe2d40e95b5a3774662e8e92f30_NeikiAnalytics.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 242KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 274B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 445KB - Virtual size: 444KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/32 Size: 143KB - Virtual size: 142KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/46 Size: 40KB - Virtual size: 39KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/63 Size: 58KB - Virtual size: 58KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/80 Size: 512B - Virtual size: 42B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/99 Size: 826KB - Virtual size: 826KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/112 Size: 523KB - Virtual size: 523KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/124 Size: 172KB - Virtual size: 172KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.symtab Size: 705KB - Virtual size: 704KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ