Static task
static1
Behavioral task
behavioral1
Sample
5c8bbe5273a8078f1c0af12a62f66a60_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5c8bbe5273a8078f1c0af12a62f66a60_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
5c8bbe5273a8078f1c0af12a62f66a60_NeikiAnalytics.exe
-
Size
240KB
-
MD5
5c8bbe5273a8078f1c0af12a62f66a60
-
SHA1
76ee87f5312914c0165f533c0e87b0c8765d3c00
-
SHA256
72cc50ebb938498bb58db63326a25188be0a75f8db45c15783aa68520f71fefb
-
SHA512
b6ab274312428a4896badb0e6a76cbd1c9b54b3b4d73c2dce0fb8d138bf207e4c07a745cf5234696d7be16fadf5a3a7bc411e95e7b5963a8a5a6384d54f28478
-
SSDEEP
1536:Bq5VwWDjDkdTRqHFOn8tIbbeYiuZIFS9bB:Bq5ud9qHFO8Kf3rIIbB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 5c8bbe5273a8078f1c0af12a62f66a60_NeikiAnalytics.exe
Files
-
5c8bbe5273a8078f1c0af12a62f66a60_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
716zxief Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
72w2plcs Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7h34qero Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ