Static task
static1
Behavioral task
behavioral1
Sample
d6bc86246014e12257204b10c84e5d90_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d6bc86246014e12257204b10c84e5d90_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
d6bc86246014e12257204b10c84e5d90_NeikiAnalytics
-
Size
456KB
-
MD5
d6bc86246014e12257204b10c84e5d90
-
SHA1
c22d340aaf8e3e1f39b6e04539e20c1d213ca7b7
-
SHA256
6074ba9ee691f1e85d9f847f67c4a55265a98ec0e24a16bc5431d7b9c2d5d182
-
SHA512
fecd87f038b1c81ed17a8f65e7a8a8303728d0646127ca52c20c1c09bcb8bb3e7cbf3c596ea4e590b56504d17a176448d449556dab8f059c577e66ca9fd8cc57
-
SSDEEP
6144:rqppuGRYx4H712f/SBTpzZA6rXD40b+7TJADvT:rqpNtb1YIp9AI4FAX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6bc86246014e12257204b10c84e5d90_NeikiAnalytics
Files
-
d6bc86246014e12257204b10c84e5d90_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
NDltoTPW Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tJrdyPER Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE