Static task
static1
Behavioral task
behavioral1
Sample
08648298cb6d4293840ca14f09b57390_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
08648298cb6d4293840ca14f09b57390_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
08648298cb6d4293840ca14f09b57390_NeikiAnalytics
-
Size
110KB
-
MD5
08648298cb6d4293840ca14f09b57390
-
SHA1
b17714a9a9e42939bc06bc190e7c0f7b334033a4
-
SHA256
312703e036b3671d81cdd9c59ff0c0b638e3aeb97d2407acf528b0e23a6bf7f7
-
SHA512
6c28f751f8d913db7e6ad84995299c2a75d91b187b80a21f8e68d342ed3ee1fc421285f2d0250f419101e321d2479f673a2b8ab5a5e8d8995cc00df7869fd600
-
SSDEEP
1536:IE3qz4ayX9ioT5Xl8lQWj1vTo5G6kvBzodfjZt4ZDp/nrHrp:179l86WqGzIfjZtSDp/nrHrp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08648298cb6d4293840ca14f09b57390_NeikiAnalytics
Files
-
08648298cb6d4293840ca14f09b57390_NeikiAnalytics.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 97KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE