Static task
static1
Behavioral task
behavioral1
Sample
dfb8ff00ca80c7e904a0e8a7cbec1940_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dfb8ff00ca80c7e904a0e8a7cbec1940_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
dfb8ff00ca80c7e904a0e8a7cbec1940_NeikiAnalytics
-
Size
14KB
-
MD5
dfb8ff00ca80c7e904a0e8a7cbec1940
-
SHA1
56221f98d2d411e0ba381d81cb6a889e72c7a746
-
SHA256
32b53413a7b2d5ab17b3f56fb5baa192af708dfa9d45d96805bfbd105ed38ea1
-
SHA512
8391f6c076caa564337ebedd128925b03575f67f29d806b9c0f4e84dca011bb3e58e35696ab8472f8aa3fef3d19605055d6803b7d8ab68545ee531ab6fd48f8e
-
SSDEEP
384:ytiiIELAdFENTAO/SZOPM9zUzQqey72LDE045H:siUsU6f3pUzxJ723A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfb8ff00ca80c7e904a0e8a7cbec1940_NeikiAnalytics
Files
-
dfb8ff00ca80c7e904a0e8a7cbec1940_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ