Static task
static1
Behavioral task
behavioral1
Sample
b4625870ba47c8ed88650061ec02e9c0_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b4625870ba47c8ed88650061ec02e9c0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
b4625870ba47c8ed88650061ec02e9c0_NeikiAnalytics
-
Size
692KB
-
MD5
b4625870ba47c8ed88650061ec02e9c0
-
SHA1
db69ff93fc2547787c5dfcb358cf867edb5b9279
-
SHA256
250b40d8eeaf1ca1e32d1706a581432f4f20ff2df9fd172a56058ea6e0166601
-
SHA512
bebd10727f99a77f66aea88cfcb5f7b020daaa0ac741e5c9626df0bab3387ef1e13a778ce8cf160e04c6fa15ae29e4c427e4248fb1d8411d3a5a2b5b7b5f2e95
-
SSDEEP
12288:UQCCh1TaLSSKrPD37zzH2A6QGgx/nstpq9KgER19zrNidbTgUHayxyF:UQPh1eLSSKrPD37zzH2A6QD/srqggERX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4625870ba47c8ed88650061ec02e9c0_NeikiAnalytics
Files
-
b4625870ba47c8ed88650061ec02e9c0_NeikiAnalytics.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 609KB - Virtual size: 609KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ