Static task
static1
Behavioral task
behavioral1
Sample
bd91c0e5f9d0ea3e8fc6f72600bab920_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
bd91c0e5f9d0ea3e8fc6f72600bab920_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
bd91c0e5f9d0ea3e8fc6f72600bab920_NeikiAnalytics.exe
-
Size
64KB
-
MD5
bd91c0e5f9d0ea3e8fc6f72600bab920
-
SHA1
6f6f41422078c41ddbad6f13b3028f65c93433d2
-
SHA256
3ad33872ce3c15a91414fd8f6d5ada5606e99763671af3e28c40b2715bc2ce92
-
SHA512
f2a38212da091f15d74d681b36abb5bfba3e8198e68e1570a03c42215c49d786b236fd1b4fc557de74add2020885bca74ac08e6fcfe10d575900bbe025bca88b
-
SSDEEP
1536:yEaG3VI80ZTD0Dn1LQCrZ8cl20V66y4O091OzpuNSV1iL+iALMH6:V3MDun1/rOS20ML+SV1iL+9Ma
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd91c0e5f9d0ea3e8fc6f72600bab920_NeikiAnalytics.exe
Files
-
bd91c0e5f9d0ea3e8fc6f72600bab920_NeikiAnalytics.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ