Static task
static1
Behavioral task
behavioral1
Sample
58d1690aaeb4e253a80aba2237df86d0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
58d1690aaeb4e253a80aba2237df86d0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
58d1690aaeb4e253a80aba2237df86d0_NeikiAnalytics.exe
-
Size
14KB
-
MD5
58d1690aaeb4e253a80aba2237df86d0
-
SHA1
466ea67af8831faf90d3b5057de04abf75fe1d06
-
SHA256
ccf0e401b28809bb49c6d744fa2d56a520e7638abe9e6305b938d8e429d129a5
-
SHA512
0af84797c60fe55c2fed7618a032d1ba12ff138ddd029d056c2ac73215a6b62fd340808ba8e8304b2b2a36a66e5aaa1aeba62445fc7ef52399909a2d0651a2f0
-
SSDEEP
384:lErRF32DvRR2TO4eiT4WdjHyezM4nVlDE045H:qrRcDJRCqiTRdLy+jA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 58d1690aaeb4e253a80aba2237df86d0_NeikiAnalytics.exe
Files
-
58d1690aaeb4e253a80aba2237df86d0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ