Static task
static1
Behavioral task
behavioral1
Sample
47ee50e9525e4363b100639ddf85a5c0_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
47ee50e9525e4363b100639ddf85a5c0_NeikiAnalytics
-
Size
65KB
-
MD5
47ee50e9525e4363b100639ddf85a5c0
-
SHA1
18cdf5e24cc756b4eb8f2295d9fe7b6fb084810f
-
SHA256
6e9f1eae3b7e233e60080c60797920af5b15c54e73fe500f987b1ecde82b126c
-
SHA512
10c9bf98a5d8e42ac331b7610b882b2e4cde7148b2c729826a8215bee8a7e2afb27c5b7b7257d07e03cba55279313a2be29893c84bff6f7d1b5c74f786612467
-
SSDEEP
1536:IFwm3XxGo0ZLmhLb5DhUjM8hyGqYUsZeZT9FjuUULpIyWteJ5I1:XmRGo0VO94krLZL0pIg5I1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47ee50e9525e4363b100639ddf85a5c0_NeikiAnalytics
Files
-
47ee50e9525e4363b100639ddf85a5c0_NeikiAnalytics.exe .ps1 windows:4 windows x86 arch:x86 polyglot
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE