Static task
static1
Behavioral task
behavioral1
Sample
4f168fa38bce776fde67323ecaed1a90_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
4f168fa38bce776fde67323ecaed1a90_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
4f168fa38bce776fde67323ecaed1a90_NeikiAnalytics.exe
-
Size
457KB
-
MD5
4f168fa38bce776fde67323ecaed1a90
-
SHA1
b08892a1d79ec56e3e1dc8fcfa716bf0ee2ce9ae
-
SHA256
a86b4a9763518c15488f43c11b82541b6724ec70e4e87d5de587c945d1f25a5a
-
SHA512
dfa9b69c5d60064ec37ad85a23b18504b81fb1dfaf3391bad78a57081aaf4cd6abf92ada7e6f18ccef364926c43d374207b7c73374ae112ee1005a5c262ebd22
-
SSDEEP
6144:1Y+32WWluqvHpVmXWEjFJRWci+WUd20rUU5EYCTvaBju4z2:CnWwvHpVmXpjJIUd2cUusvalxz2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f168fa38bce776fde67323ecaed1a90_NeikiAnalytics.exe
Files
-
4f168fa38bce776fde67323ecaed1a90_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 442KB - Virtual size: 456KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE