Static task
static1
Behavioral task
behavioral1
Sample
581ae5dbeb8b4c67eb616fdd92290d00_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
581ae5dbeb8b4c67eb616fdd92290d00_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
581ae5dbeb8b4c67eb616fdd92290d00_NeikiAnalytics.exe
-
Size
14KB
-
MD5
581ae5dbeb8b4c67eb616fdd92290d00
-
SHA1
c93d4eb799a09ffc8b108e1fb227dac6a29ba3a5
-
SHA256
9fd0b238cd7a6e0dad7fd26f72de634d0ae3be0d979e6fbb2fc1f303c3fd68a5
-
SHA512
343a105ab2e1a56a11cb8141a8993664ec8790982b78d48577136c050ae2a965b24ee0b2910874dfb8bc3b45f36c600523f335232f5c4be79eb13bcfda2bc66a
-
SSDEEP
384:bGXWUYvUkW/m/wg6DjEWK3DE045HNssss:b+7YckWukDjEW+A3ssss
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 581ae5dbeb8b4c67eb616fdd92290d00_NeikiAnalytics.exe
Files
-
581ae5dbeb8b4c67eb616fdd92290d00_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ