Static task
static1
Behavioral task
behavioral1
Sample
5d8b5b577a3e502a41c81bb3fa0ec520_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
5d8b5b577a3e502a41c81bb3fa0ec520_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
5d8b5b577a3e502a41c81bb3fa0ec520_NeikiAnalytics.exe
-
Size
12KB
-
MD5
5d8b5b577a3e502a41c81bb3fa0ec520
-
SHA1
f40dfeaf876e329194d691bec858b5295fa84e18
-
SHA256
8e8ec620c9d54c70f3c6e8529e06496b3595fe11d3ff65faab8ca1f081a488e9
-
SHA512
9980f120922ab8386cb6f1db583af32378acaecd2df40e93eb4ffda68da97b9108a63b349c366cd9ac1e146a214c4df35c3ccf4a90d83ff53ca4f8385d7ff7fb
-
SSDEEP
384:3L7li/2zzq2DcEQvdQcJKLTp/NK9xalY:7fMCQ9clY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 5d8b5b577a3e502a41c81bb3fa0ec520_NeikiAnalytics.exe
Files
-
5d8b5b577a3e502a41c81bb3fa0ec520_NeikiAnalytics.exe.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ