Static task
static1
Behavioral task
behavioral1
Sample
2dcc94f71a40bcc3587ab64ba0c5b900_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2dcc94f71a40bcc3587ab64ba0c5b900_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
2dcc94f71a40bcc3587ab64ba0c5b900_NeikiAnalytics
-
Size
158KB
-
MD5
2dcc94f71a40bcc3587ab64ba0c5b900
-
SHA1
edcbddd8c22ae9b4774f6cfbf6e10d42fdc5e4e8
-
SHA256
a72283de7e745224edc0e000af3df4292f12807dc5b012f5ae1d07a4f556d114
-
SHA512
519cef820889ae5cdd66c999beb138b62f14eb2f3f7d80592f32cfc9252ed9819959ee777980104b98895c38dc1ece98afdf999006842c1f729c9121df7a9246
-
SSDEEP
1536:uvUvE3qz4ayX9ioT5Xl8lQWj1vTo5G6kvBzodfjZp4ZDp/naRRXE:PC79l86WqGzIfjZpSDp/naRR0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2dcc94f71a40bcc3587ab64ba0c5b900_NeikiAnalytics
Files
-
2dcc94f71a40bcc3587ab64ba0c5b900_NeikiAnalytics.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE