Static task
static1
Behavioral task
behavioral1
Sample
bd04b3fd331c9cf1897ee9eccab1c1e0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd04b3fd331c9cf1897ee9eccab1c1e0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
bd04b3fd331c9cf1897ee9eccab1c1e0_NeikiAnalytics
-
Size
4.8MB
-
MD5
bd04b3fd331c9cf1897ee9eccab1c1e0
-
SHA1
18847c84824f9a5fdd6437bdafd5309975c5df98
-
SHA256
5021be2b6c6f1d0c1b447d912e08feac4728d64e15d6b1516f7033cba8310a9f
-
SHA512
269778ee3316cd3707a81435b82b038b5ac3e487412eb03d71bf7f88634aff457a013720398ebbb16eed79a6e22c06b34a03b502c9c44568f31f6d068220428d
-
SSDEEP
49152:nyGrJtOGy3c2psErBTa0/AxixW2lfJHlQgr9B9MpIbjnhOHo7R6GFJap4mO52gG4:yGuGIziYRx/QgBJhKs6O2gmVxGR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd04b3fd331c9cf1897ee9eccab1c1e0_NeikiAnalytics
Files
-
bd04b3fd331c9cf1897ee9eccab1c1e0_NeikiAnalytics.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 19.1MB - Virtual size: 19.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22.4MB - Virtual size: 22.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 486KB - Virtual size: 663KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 276B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/32 Size: 540KB - Virtual size: 539KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/46 Size: 72KB - Virtual size: 71KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/63 Size: 212KB - Virtual size: 212KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/80 Size: 512B - Virtual size: 42B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/99 Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/112 Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/124 Size: 814KB - Virtual size: 813KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.symtab Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ