Static task
static1
Behavioral task
behavioral1
Sample
79ff6bfdfa977165a6e40d6d08f04f80_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
79ff6bfdfa977165a6e40d6d08f04f80_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
79ff6bfdfa977165a6e40d6d08f04f80_NeikiAnalytics.exe
-
Size
380KB
-
MD5
79ff6bfdfa977165a6e40d6d08f04f80
-
SHA1
6c4954a2fdcf562baa6bc94b2625330b2542c13f
-
SHA256
7667f20836adbc26c247ee8951d3dedd2b345a5e6dd4623f01f04f213f0368f5
-
SHA512
1f87db377897bf7f6084d1451d629ab7aec6122ed1e045d72b9d3e097d084b4ac8c8c0fa993a7ad81d40ef09965c7a2006e87b01ae2913d17d2d76734a13ae8e
-
SSDEEP
6144:Tz6Cu5Qj4qqnmvyQh1WB9EPyNt2/VkdSy2Jf7EpDx/uzmr6EF:Tz6J5Qj4qjyQhmEPst2SSy2NE1/zrV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79ff6bfdfa977165a6e40d6d08f04f80_NeikiAnalytics.exe
Files
-
79ff6bfdfa977165a6e40d6d08f04f80_NeikiAnalytics.exe.exe .vbs windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 53B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ