Static task
static1
Behavioral task
behavioral1
Sample
7af307199c1e852456f590a88bcce430_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7af307199c1e852456f590a88bcce430_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
7af307199c1e852456f590a88bcce430_NeikiAnalytics
-
Size
665KB
-
MD5
7af307199c1e852456f590a88bcce430
-
SHA1
92fad6ad798da189c67eaa26551aa248fe4913bc
-
SHA256
4ba8505176acd661117f7f5725ee8f215ec08b8babca42cbe4d72c70c04cc885
-
SHA512
72b42ee74ce339bd83abb13ce4fe6ab3f6cf0de982f706b8ec63e857f4457f4b9b25d8d767fbc12ced145ebe4e0d71b52857e9ae17704472e4372195512be71c
-
SSDEEP
12288:6AIEmm20H0s1Am67UgpjF46MoHrdRGkkKSfyeh:6A3B20UsU7LlFOGZ0P5Ph
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7af307199c1e852456f590a88bcce430_NeikiAnalytics
Files
-
7af307199c1e852456f590a88bcce430_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
yzPzORmq Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TGOqOPny Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��{� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE