Static task
static1
Behavioral task
behavioral1
Sample
29b3313932d48f693fba1672345d3c80_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
29b3313932d48f693fba1672345d3c80_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
29b3313932d48f693fba1672345d3c80_NeikiAnalytics
-
Size
298KB
-
MD5
29b3313932d48f693fba1672345d3c80
-
SHA1
ba188321282a577c4d09ca71dba27d6357dca738
-
SHA256
ae87a4db541706776bfced4991138cdc40fd59c3721233d63712281fa75afa73
-
SHA512
2d0dfee342f2d45506ee4049c357b9127ce328c3c83ce6f4d816e7c3a8f42c224705bc0ffe8273d4ddd31967b3bb91e046cce4ce372cd861eafcb48855b6e7f8
-
SSDEEP
6144:wlj7cMnLw9J3FJbk5jZP3FhrenHzBSwMd7wvcE:wlbLwr3FJbk5jJ3mnHdSwM+9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29b3313932d48f693fba1672345d3c80_NeikiAnalytics
Files
-
29b3313932d48f693fba1672345d3c80_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
VHqxTUpa Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IaDsgWGk Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE