Static task
static1
Behavioral task
behavioral1
Sample
5c01ab224cea572ff49dbee999d80170_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5c01ab224cea572ff49dbee999d80170_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
5c01ab224cea572ff49dbee999d80170_NeikiAnalytics.exe
-
Size
14KB
-
MD5
5c01ab224cea572ff49dbee999d80170
-
SHA1
f8460dc215f09e95b0bd270124107cb768a693ed
-
SHA256
1fbb7cbf8af63332c1fb88eeab0f1af9bcac4cb2919b071b21c0b8527d092f15
-
SHA512
3cbfe6892431a13864844b98c50865a2108f63e05551466ab48ce115b82183d0152dbd6af5eac46d197e2fc124f6300dbc935e89b99ebeccf27b433550616393
-
SSDEEP
192:1quPhirEOTEGSZdp+a6iJRq+ZSyKFxJ/SS9fKeqHApD5rhqqDE045HQ4TTTT:gE40fR0USRFr/VXprtDE045HdTTTT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 5c01ab224cea572ff49dbee999d80170_NeikiAnalytics.exe
Files
-
5c01ab224cea572ff49dbee999d80170_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ