Static task
static1
Behavioral task
behavioral1
Sample
6bab81cd52698964b8a7b33e1ea1c6a0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6bab81cd52698964b8a7b33e1ea1c6a0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
6bab81cd52698964b8a7b33e1ea1c6a0_NeikiAnalytics
-
Size
67KB
-
MD5
6bab81cd52698964b8a7b33e1ea1c6a0
-
SHA1
9c468917319ce050efa41a83f77a7e1fb7db3b2b
-
SHA256
0461e6e0b4b1832cc942a766b6b5aa897fce7608b049b932474ec03e8f02c7e4
-
SHA512
e9a6472771d859f2e90978d407b71e14a395916a601f3e4be429b2468cf06ce6187cbee5178a290ba333d54aa84265c8fd0bfb34f9254f283592ed86716f4e65
-
SSDEEP
1536:gSCLxF0/tMDDyOUGpgJ2dzJS/qVm4bsURQWR/Rj:O0/WWGGuJ97eWVx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6bab81cd52698964b8a7b33e1ea1c6a0_NeikiAnalytics
Files
-
6bab81cd52698964b8a7b33e1ea1c6a0_NeikiAnalytics.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ajelhf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ