Static task
static1
Behavioral task
behavioral1
Sample
b5b3072d081d96b278f8d6ef53e12bf0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b5b3072d081d96b278f8d6ef53e12bf0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
b5b3072d081d96b278f8d6ef53e12bf0_NeikiAnalytics
-
Size
14KB
-
MD5
b5b3072d081d96b278f8d6ef53e12bf0
-
SHA1
f036317c63abd5220b57264e3a55ab93c7610d34
-
SHA256
a4e32cd66bb3691855fdfeb1f4240c2c876d50e70bf027269ab79be0f1a71038
-
SHA512
5a055d6e3466d0816c4d46f9edb980903f1b29010720b3f8b4dd1c54057312ec5b337c362fd8d70f85943a4e192cdd46f97f2f294384b317e66ae9a7ba5182e2
-
SSDEEP
384:SUsTo9N4FwftXWrQrQrQrQrhXXXXdRHSZLDDE045HYHA+HA+HA+HA+:SUsTo9N4SftXCXXXXd4ZzAaNNNN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5b3072d081d96b278f8d6ef53e12bf0_NeikiAnalytics
Files
-
b5b3072d081d96b278f8d6ef53e12bf0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ