Static task
static1
Behavioral task
behavioral1
Sample
d0dffbee7401de768cb4fe793a66e590_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
d0dffbee7401de768cb4fe793a66e590_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
d0dffbee7401de768cb4fe793a66e590_NeikiAnalytics
-
Size
2.6MB
-
MD5
d0dffbee7401de768cb4fe793a66e590
-
SHA1
1dec3a3a470627897c87453c89c093c19438b77c
-
SHA256
6477322f4a657bfa370cd7434d1252aea8336fa5d6af8a823f720e12bffc6edf
-
SHA512
1dcac42f804f0b21f0f1e1aea7255d1d00338f3424aebcf43176b8b9225dbdf9a08dbcfbedfe57909779569bae173a30c35660e8379b2a17d516448d5fa58d2e
-
SSDEEP
49152:DG4QDukZIBmfQkVAIrHt0TnKEvMUxAdMSegKxIJ3YAH:DgIBcAGt46zKxIJr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0dffbee7401de768cb4fe793a66e590_NeikiAnalytics
Files
-
d0dffbee7401de768cb4fe793a66e590_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 48KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 184KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 976KB - Virtual size: 976KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE