Static task
static1
Behavioral task
behavioral1
Sample
1e7982a8bb7b2af44bb0b057959b3410_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1e7982a8bb7b2af44bb0b057959b3410_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
1e7982a8bb7b2af44bb0b057959b3410_NeikiAnalytics
-
Size
52KB
-
MD5
1e7982a8bb7b2af44bb0b057959b3410
-
SHA1
9b46860bb10c0b906c0578d60c3207351c4f7dd8
-
SHA256
7e00069451b51e259cfb75b9b3a30d27657c3427ef3b56eea1d812478dda858d
-
SHA512
520d2f6e9fd6c0577c05081ee0c9c44b3bdc7bda63ceb604e698c99fd0233ecf8ab1810bbaa5d9576ae6798cb2237eedd9adebeaf9749f1290c0b409f71809be
-
SSDEEP
768:iYfV+7Y3GGrU+j4P7VkprRcszIkL72Fy4CAf4l1QM53y/1H5F/svMABvKWe:BiY24U+jdcszIkLyy4ZuN94mMAdKZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e7982a8bb7b2af44bb0b057959b3410_NeikiAnalytics
Files
-
1e7982a8bb7b2af44bb0b057959b3410_NeikiAnalytics.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ