Static task
static1
Behavioral task
behavioral1
Sample
6c3a154ccff901e6233857205487ab40_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
6c3a154ccff901e6233857205487ab40_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
6c3a154ccff901e6233857205487ab40_NeikiAnalytics.exe
-
Size
14KB
-
MD5
6c3a154ccff901e6233857205487ab40
-
SHA1
fa0f446a3821fd3cfa7a40fdd8983147b2921678
-
SHA256
6ce9f304051832639c83b089bac8ea4d4c18d143b3fc496370eeec33c577a98c
-
SHA512
85f6a2305974109ce074dc0789065b69570bc536bf6053b0af115c31d40fc67428d96142be90431e8af20394db5c355b2f6a0ff56d50d00ba25b1c161d2d79c1
-
SSDEEP
384:t/a6QDJHtQRjP3ShA8H06znBQH3YlDE045HQCCC:ti6Q5mRjPX8HjzHlA2CCC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 6c3a154ccff901e6233857205487ab40_NeikiAnalytics.exe
Files
-
6c3a154ccff901e6233857205487ab40_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ