Static task
static1
Behavioral task
behavioral1
Sample
59d97a6495a2672d6ea680c63c725300_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
59d97a6495a2672d6ea680c63c725300_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
59d97a6495a2672d6ea680c63c725300_NeikiAnalytics
-
Size
12KB
-
MD5
59d97a6495a2672d6ea680c63c725300
-
SHA1
52ccbdf205bdd2f30fe222d7e56ce461f03054e7
-
SHA256
82b64823fe99eb6358f14314581b4e1db6d1227ee035bafabc1adc0b4ebcb164
-
SHA512
3989df7b6aefec77762359e222394234607cdde1f45f97102b3d912a00ce0216000a7f5d4c146cc8e2d46281402bf5dce5efbac756a01d13ae0ec889ef860571
-
SSDEEP
384:ZL7li/2zQq2DcEQvdQcJKLTp/NK9xaSx:pEMCQ9cSx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59d97a6495a2672d6ea680c63c725300_NeikiAnalytics
Files
-
59d97a6495a2672d6ea680c63c725300_NeikiAnalytics.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ