Static task
static1
Behavioral task
behavioral1
Sample
28e37c95cdd7687a67714407d186c520_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
28e37c95cdd7687a67714407d186c520_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
28e37c95cdd7687a67714407d186c520_NeikiAnalytics.exe
-
Size
12KB
-
MD5
28e37c95cdd7687a67714407d186c520
-
SHA1
76670a79bba7d3776b49ee702c91e9d25a97a2c4
-
SHA256
d5fc3b1130ef58d8215d78fba23402cc3d67d7d7d15dbfbe54f88de2fe8c89f8
-
SHA512
4196a9dc9ce503b476d5da6670bc45496866cd8ff11b0f625501c1f52faa8e0c9e51013c98eed780a6dc1f4fbf43a4b795723a53168e6f7b16693902739f2b01
-
SSDEEP
384:NL7li/2zFq2DcEQvdQcJKLTp/NK9xal7:d1MCQ9cl7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28e37c95cdd7687a67714407d186c520_NeikiAnalytics.exe
Files
-
28e37c95cdd7687a67714407d186c520_NeikiAnalytics.exe.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ