Static task
static1
Behavioral task
behavioral1
Sample
c687cd34669397190af42d87d32e48a0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c687cd34669397190af42d87d32e48a0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
c687cd34669397190af42d87d32e48a0_NeikiAnalytics
-
Size
14KB
-
MD5
c687cd34669397190af42d87d32e48a0
-
SHA1
65e950909eed4f04807a6c7d847567e3fb496d9b
-
SHA256
aa94fd297d0714d9d59e987069732f6a09e266edba88ebc5623f20a5187dfb3e
-
SHA512
ed85b4b97478bf2dcf262cb7692b1a131fc35daac0a3f2f0f8211567167d50b9a331d1bdb3fbe08ec02b4b057ab2ab5ed10d41b7ee1d55e4852c409786cea799
-
SSDEEP
384:5O2v41QrluCVCX0T+GHZkTROWDb7qPYDE045HCh:gQRyEbZk4WX7qaAO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c687cd34669397190af42d87d32e48a0_NeikiAnalytics
Files
-
c687cd34669397190af42d87d32e48a0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ