Static task
static1
Behavioral task
behavioral1
Sample
4853d3ec8851110ea7d31f5da8d0fdc0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4853d3ec8851110ea7d31f5da8d0fdc0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
4853d3ec8851110ea7d31f5da8d0fdc0_NeikiAnalytics
-
Size
65KB
-
MD5
4853d3ec8851110ea7d31f5da8d0fdc0
-
SHA1
4451d16dd193a8e5c00e13a1ebab8de4b2a73184
-
SHA256
323486e3baae55fdf909493b8d0b12abc1d11c2da9b7ae9882640cb6aeed8612
-
SHA512
cb1e1d8d597c6c0f698fd0f3d37c6adc2aca40bd8f5ec3f29ab8f8238e12401b3ecf7ec1e8b4ec90042982ece2a51f42b8c50da543aa2d8b58ae21b665edc910
-
SSDEEP
768:SCru/f9UwfE6zy4n8uZ5tUXMJ+fROUmELY2glEbM3j+rd+fpkXVTWkReOOU:GRzzy48untU8fOMEI3jyYf6llOU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4853d3ec8851110ea7d31f5da8d0fdc0_NeikiAnalytics
Files
-
4853d3ec8851110ea7d31f5da8d0fdc0_NeikiAnalytics.exe .vbs windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ