Static task
static1
Behavioral task
behavioral1
Sample
58b4f36e3090196f4ab9162bac878c633f89f9fada1c70f7cbccfd6da59c7436_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
58b4f36e3090196f4ab9162bac878c633f89f9fada1c70f7cbccfd6da59c7436_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
58b4f36e3090196f4ab9162bac878c633f89f9fada1c70f7cbccfd6da59c7436_NeikiAnalytics
-
Size
12KB
-
MD5
2c58583a6085d5729f5a4ebbb4d7cc40
-
SHA1
82ce7c08a089250bac20f6b2ebd80d5f1faaa8ba
-
SHA256
58b4f36e3090196f4ab9162bac878c633f89f9fada1c70f7cbccfd6da59c7436
-
SHA512
f51bdd356d1eba520f1e86bb25c578af607e2e981ed9bd37630a89c3abd2cda5d2d3b8f0951765b6a044832be070f9a0d95e3562a7efc93f412be5e4e2998d9a
-
SSDEEP
384:pL7li/2zXq2DcEQvdQcJKLTp/NK9xaDf:ZjMCQ9cDf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 58b4f36e3090196f4ab9162bac878c633f89f9fada1c70f7cbccfd6da59c7436_NeikiAnalytics
Files
-
58b4f36e3090196f4ab9162bac878c633f89f9fada1c70f7cbccfd6da59c7436_NeikiAnalytics.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ