Static task
static1
Behavioral task
behavioral1
Sample
dbf134e133bfed3a7dee3c4d76416072_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dbf134e133bfed3a7dee3c4d76416072_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
dbf134e133bfed3a7dee3c4d76416072_NeikiAnalytics.exe
-
Size
565KB
-
MD5
dbf134e133bfed3a7dee3c4d76416072
-
SHA1
11025a02968122e6a85525685240661e711ab2ec
-
SHA256
602414be7979115ff52b98bb7e5df9937f2c94f70cf19727fd56e58f99dbb02c
-
SHA512
3f9ec4ca1e0e107becde371a5b7e282a9f473c2a7538da11a3a121df2c09564ba67cb444995b22e669d219bc92459267cf8b51ab1a0e5d260444d3864179fcc6
-
SSDEEP
12288:p7++ytf84csN4Tlo4HaET4A/Iy+k+0VodFCcAr/Y9SO8IyIJZUwJC+aLhUS2HZ:p7mtfdFerYxeKa2S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbf134e133bfed3a7dee3c4d76416072_NeikiAnalytics.exe
Files
-
dbf134e133bfed3a7dee3c4d76416072_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE