Static task
static1
Behavioral task
behavioral1
Sample
50c0df9ceaf9d8163ae04e7203ad10f0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
50c0df9ceaf9d8163ae04e7203ad10f0_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
50c0df9ceaf9d8163ae04e7203ad10f0_NeikiAnalytics
-
Size
9.7MB
-
MD5
50c0df9ceaf9d8163ae04e7203ad10f0
-
SHA1
3cf55bef75c5ed5ef253681214a04db2c43eb45c
-
SHA256
6973c136e343950d17c7cff02408e7dda9d8d0526c07422881e6e399956f9c3e
-
SHA512
4220108662123a4127cd6ac6d58300ef740d5f610eda52a74f9251205a8c2750fcc1279aaad457b9e8c0dc609e6e07f3ccda13cb80c212e57792dd9d584f4722
-
SSDEEP
196608:RKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKo:2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50c0df9ceaf9d8163ae04e7203ad10f0_NeikiAnalytics
Files
-
50c0df9ceaf9d8163ae04e7203ad10f0_NeikiAnalytics.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.orpc Size: 7KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 11KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 24KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE