Static task
static1
Behavioral task
behavioral1
Sample
d62ffb05eaaec3b011f98d0b7608e160_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d62ffb05eaaec3b011f98d0b7608e160_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
d62ffb05eaaec3b011f98d0b7608e160_NeikiAnalytics
-
Size
462KB
-
MD5
d62ffb05eaaec3b011f98d0b7608e160
-
SHA1
1b6a4f88a4843cb30d0de9502a61f38ee86598a6
-
SHA256
d289b43e17a1e5501289646b163a1296e0f9054f2a0257f9054dacdfd3f26ac4
-
SHA512
3d72734f38b05d343c4511402cde042129526403ae44c8d9ec8bb7bb993c80d7e1733a225fd91a47ccfc6ce64bca78a2752458758ba25d448e8c1b3a91cfd22d
-
SSDEEP
6144:it03a62hzpSNxV2qcJVLNyTiY6wDyIJ2r/bl4fiu:Os52hzpHq8eTi30yIQrDle
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d62ffb05eaaec3b011f98d0b7608e160_NeikiAnalytics
Files
-
d62ffb05eaaec3b011f98d0b7608e160_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
packerBY Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE