Static task
static1
Behavioral task
behavioral1
Sample
0ff4ac384c697047385cdf9158398d70_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0ff4ac384c697047385cdf9158398d70_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
0ff4ac384c697047385cdf9158398d70_NeikiAnalytics
-
Size
47KB
-
MD5
0ff4ac384c697047385cdf9158398d70
-
SHA1
67a5b40b99db8aaf07bc128599746b7f5d2fa72c
-
SHA256
6bc8fce0133bae85aefd0bea2d305b9300cb8cd5cc6402f7e27b3a7d0006bfb0
-
SHA512
f46672f12ac27fe18909c1031d4557a470648603f35b3334a686ca30081d0f98e9b87dae8798d0ee6b72ae80bf964f4768bd48a86de05a5251c647d263767fb7
-
SSDEEP
768:UWmrZmoy69n7c8IWzFQMPqjMVvAoNZKcAz2lrKixvrmeu27O5ffKpyo:UWTg7c8IWzFQrOZKtIKdeueK3KN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ff4ac384c697047385cdf9158398d70_NeikiAnalytics
Files
-
0ff4ac384c697047385cdf9158398d70_NeikiAnalytics.exe windows:20 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�tuxt Size: 16KB - Virtual size: 270KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
nrdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
62src Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ