Static task
static1
Behavioral task
behavioral1
Sample
364000b0565c28f2c3fc86386a1a08da36749778a6a45005daf77895d73d2657_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
364000b0565c28f2c3fc86386a1a08da36749778a6a45005daf77895d73d2657_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
364000b0565c28f2c3fc86386a1a08da36749778a6a45005daf77895d73d2657_NeikiAnalytics
-
Size
12KB
-
MD5
056bb5803b5fbf8ac5ec1fce0b6b5290
-
SHA1
7c3252a6f99c12dfbb6b47ab4d97d4c90f1cb242
-
SHA256
364000b0565c28f2c3fc86386a1a08da36749778a6a45005daf77895d73d2657
-
SHA512
15ee65c83bbc966bd4aedf8e5bb729aac9d36e8c9d510f1603a4fe42f3c4b301167722e577be9e1657ddc5e788278adf15a7c96e3b03d7e96b42ac741c3ab71f
-
SSDEEP
384:ML7li/2z/q2DcEQvdhcJKLTp/NK9xaY6:KrM/Q9cY6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 364000b0565c28f2c3fc86386a1a08da36749778a6a45005daf77895d73d2657_NeikiAnalytics
Files
-
364000b0565c28f2c3fc86386a1a08da36749778a6a45005daf77895d73d2657_NeikiAnalytics.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ