Static task
static1
Behavioral task
behavioral1
Sample
788477b87e9f17b4954b48a354923dc0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
788477b87e9f17b4954b48a354923dc0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
788477b87e9f17b4954b48a354923dc0_NeikiAnalytics.exe
-
Size
4.8MB
-
MD5
788477b87e9f17b4954b48a354923dc0
-
SHA1
10e545807dbe396a2f8387ffb6f8ca049ee308e9
-
SHA256
9d389852a1b81a75de2e72b9da27a1ab832797d03f69235bb081c4912d6ab328
-
SHA512
5d583f7cf96bf6039bcf9e7e4d7fe8c6bd4b7534bbc4c7a3d9ff97d850103b69ee31e553260b348036c25731b7103cfbd8125074c5fd1b937446d1c5045fc0be
-
SSDEEP
98304:zL0fIaBCHMhiiXgfDKUcJKJh5D5VndrWjs8O+lYXhzUDPxf89n9K:XJshNQfD0KHVdrWjA+MOPxf89s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 788477b87e9f17b4954b48a354923dc0_NeikiAnalytics.exe
Files
-
788477b87e9f17b4954b48a354923dc0_NeikiAnalytics.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 239KB - Virtual size: 560KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.petite Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 59KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE