Static task
static1
Behavioral task
behavioral1
Sample
7d8a697535fa3703a8b043e4a14f6a90_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7d8a697535fa3703a8b043e4a14f6a90_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
7d8a697535fa3703a8b043e4a14f6a90_NeikiAnalytics
-
Size
241KB
-
MD5
7d8a697535fa3703a8b043e4a14f6a90
-
SHA1
48ac0c92d324dbfc6695540ef12df29b35f8f100
-
SHA256
d440d3ee1b630c2b6fe33593e92111b2914bd0ce3fa06649f8384505cd1b125a
-
SHA512
7e6f26f3c72910d4a72c60f5efdc74e3a083b7b99c1152e56c68667e592ff3b9aa0979444741f46fe55a2d5fe4c93eddc5e76854f2aeec6b4fe8714f2c94b788
-
SSDEEP
6144:l91S7VpVOvub5whFQKziOwvtFOEXiGuQNsQMSG:94KiIQ28lb0X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d8a697535fa3703a8b043e4a14f6a90_NeikiAnalytics
Files
-
7d8a697535fa3703a8b043e4a14f6a90_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 42KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ