Static task
static1
Behavioral task
behavioral1
Sample
17bb0505eca6a08119650cc6a286a299a3f1de505572a45dcf0eb9c3ca0b7021_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
17bb0505eca6a08119650cc6a286a299a3f1de505572a45dcf0eb9c3ca0b7021_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
17bb0505eca6a08119650cc6a286a299a3f1de505572a45dcf0eb9c3ca0b7021_NeikiAnalytics
-
Size
483KB
-
MD5
ac4299fba990c3a82390cdd28f8ce200
-
SHA1
1f8fcacaaa588042b81f12c02d1e1a1faba5ee36
-
SHA256
17bb0505eca6a08119650cc6a286a299a3f1de505572a45dcf0eb9c3ca0b7021
-
SHA512
ab1d1e07cfdff87d2aaf82db8bad084daaf6834fac8b75d2343708a66dd3e45cd4ab9944a02fc260d9682f764f47cf181dcb93e77be73e731d225b9ff401ea15
-
SSDEEP
6144:VgLAs99oEyE7kZKtFy5v1k3RMZebBDRMZebBGzxUur/THL1k3RMZebBvG0NPhGch:Vg0sntY5vARM0RM/3ARMSG0dhvARMoHG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17bb0505eca6a08119650cc6a286a299a3f1de505572a45dcf0eb9c3ca0b7021_NeikiAnalytics
Files
-
17bb0505eca6a08119650cc6a286a299a3f1de505572a45dcf0eb9c3ca0b7021_NeikiAnalytics.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kofbl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ