Static task
static1
Behavioral task
behavioral1
Sample
a2e98a023460039f7b732efd59a0f7a0_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a2e98a023460039f7b732efd59a0f7a0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
a2e98a023460039f7b732efd59a0f7a0_NeikiAnalytics
-
Size
4.8MB
-
MD5
a2e98a023460039f7b732efd59a0f7a0
-
SHA1
c59245797a1121008fceb00f425e4fe123d7b7bc
-
SHA256
08e5889d1e513615b4b99db3c47453e774981989d1799919341ebf2127a6d83b
-
SHA512
e3721b2e064e798a96c006c23a49cfae857a32b37c3515c0c4b869b93f5bec776050435cc15e96e6e5122551906384ead3bc99e6252dbf862763a39dce831faf
-
SSDEEP
49152:CbDFXE8j7dGZUgduvi28/m/USuVmeGSJkTcij4e4RzHPF7orxL9cFYO81jPIzjSu:0Eu4SImxNltnornUvs21s6m7f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2e98a023460039f7b732efd59a0f7a0_NeikiAnalytics
Files
-
a2e98a023460039f7b732efd59a0f7a0_NeikiAnalytics.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 12.5MB - Virtual size: 12.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 848KB - Virtual size: 983KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 211B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/18 Size: 379KB - Virtual size: 378KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/30 Size: 445KB - Virtual size: 444KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/43 Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/55 Size: 683KB - Virtual size: 682KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/71 Size: 411KB - Virtual size: 411KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/87 Size: 512B - Virtual size: 48B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/102 Size: 512B - Virtual size: 44B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.symtab Size: 887KB - Virtual size: 886KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ