Static task
static1
Behavioral task
behavioral1
Sample
d1a4e9bd3b4bc95e1127d34a16073fe0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
d1a4e9bd3b4bc95e1127d34a16073fe0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
d1a4e9bd3b4bc95e1127d34a16073fe0_NeikiAnalytics
-
Size
8.5MB
-
MD5
d1a4e9bd3b4bc95e1127d34a16073fe0
-
SHA1
3d238eaaab7a63fce33eb776b1158df855e11f96
-
SHA256
49c660038bf624a9ee06de724150682603e46cc5c66d55cbcbd049446df280e8
-
SHA512
424fd7a638df7fa5065fd77b734b6ef0d0dd07649b7fe331ee842924ef2c0708892ad19bf97691d71077b96783d905077f31943d914bc7987364f3ca26a6df83
-
SSDEEP
49152:HGifGiUGimGiPGiUGiCGiYGiKGiZGiKGifGiKGiYGiKGiZGiKGifGiOGiMGivGiF:u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1a4e9bd3b4bc95e1127d34a16073fe0_NeikiAnalytics
Files
-
d1a4e9bd3b4bc95e1127d34a16073fe0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.petite Size: 35KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 741B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE