Static task
static1
Behavioral task
behavioral1
Sample
d2fbf1a97a29182e13053ee096a9ba60_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d2fbf1a97a29182e13053ee096a9ba60_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
d2fbf1a97a29182e13053ee096a9ba60_NeikiAnalytics
-
Size
61KB
-
MD5
d2fbf1a97a29182e13053ee096a9ba60
-
SHA1
056fd59691368cdbc92864e623bbe86ddfcfbed6
-
SHA256
e1a6e1d3f3396a419dd2c61e6a0a9bdabdeaf39ea036155027bce3448baad020
-
SHA512
595705b7af158f887035277de296c3b8646e9297e7228ad536a1e4a06b1db5b8d712af529f28017a93734bdbec5880f4b78a0157ae1e932b03ce22f60ade8e48
-
SSDEEP
768:BCrk/f9Uw/E6zy4n8uZ5tUXMJ+fROUmELY2glEbM3j+rsfpRfLTWLReOORuR:3RTzy48untU8fOMEI3jysfPDEORuR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2fbf1a97a29182e13053ee096a9ba60_NeikiAnalytics
Files
-
d2fbf1a97a29182e13053ee096a9ba60_NeikiAnalytics.exe .vbs windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.htext Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE