Static task
static1
Behavioral task
behavioral1
Sample
b5add9438411d98135650713db074570_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b5add9438411d98135650713db074570_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
b5add9438411d98135650713db074570_NeikiAnalytics
-
Size
1.5MB
-
MD5
b5add9438411d98135650713db074570
-
SHA1
11d2018ae4932bb281d3b0cac91de71b80408305
-
SHA256
4905451b717a315bf52387aba5ec8812a629efd0e0d82f7b2fdaaafdae9b6f8e
-
SHA512
bc0ca78b1cf525b48919437adbefacaf9f8a52b7c36064cb8793e7a2de419bc9c524ac717a4c6677d2aa2f7361cd1a1f08762a73a74279027a6dcfd83f5b68ad
-
SSDEEP
12288:9h0GSoT621fM5PlkZwNZ6helBicUO+aNVQEWs:b0GT62lMUSNRGnSRWs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5add9438411d98135650713db074570_NeikiAnalytics
Files
-
b5add9438411d98135650713db074570_NeikiAnalytics.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 534KB - Virtual size: 534KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2.4MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 926KB - Virtual size: 926KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ