Static task
static1
Behavioral task
behavioral1
Sample
5044e599bec1dacb776e5af8d96d4c90_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
5044e599bec1dacb776e5af8d96d4c90_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
5044e599bec1dacb776e5af8d96d4c90_NeikiAnalytics
-
Size
14KB
-
MD5
5044e599bec1dacb776e5af8d96d4c90
-
SHA1
c81b3f72d031385cbe260cca72f8e9b7107b14c5
-
SHA256
9707b138823366c5045e65bdb8cbbb6f97d52fe65009f2e3aef2cbb30947b03d
-
SHA512
b06285e4e19eb1f50022a5fdba4162aec08ce23c78cb000cddc910e59841631636a3c16da243dc62d23391533e06900d5b4fe3d86aafaacd2e3350b8f2c068b7
-
SSDEEP
192:KoB/CCFq5MeduICxRg3RI5NJd7nHA9JLfJWnZ3ojy6Om8qrqDE045HQl8a98a986:DsdQm3CjFnHoFGZm8BDE045HXDDDD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5044e599bec1dacb776e5af8d96d4c90_NeikiAnalytics
Files
-
5044e599bec1dacb776e5af8d96d4c90_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ