Static task
static1
Behavioral task
behavioral1
Sample
28c217d8ce68c44439f546251a2db670_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
28c217d8ce68c44439f546251a2db670_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
28c217d8ce68c44439f546251a2db670_NeikiAnalytics.exe
-
Size
12KB
-
MD5
28c217d8ce68c44439f546251a2db670
-
SHA1
dcfa44b766a10262b46cd2ce8410574d2f603bf3
-
SHA256
8981cd0b19761afec4144d202c697fcb9264649b8113f8d46b4c88aeea147f7b
-
SHA512
88624cddc9c0e4e85035e90afa7c3e67b0ea6db93cc9bc19b62c4ec8c64e957539ba7536f48f3523aa8382244db96107b791875e72730d179dc52ed15d9022fe
-
SSDEEP
384:uL7li/2zcq2DcEQvdhcJKLTp/NK9xaVX:4YM/Q9cVX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28c217d8ce68c44439f546251a2db670_NeikiAnalytics.exe
Files
-
28c217d8ce68c44439f546251a2db670_NeikiAnalytics.exe.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ