Static task
static1
Behavioral task
behavioral1
Sample
00ed2e4dcadb41354c48c91cd2e1e670_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
00ed2e4dcadb41354c48c91cd2e1e670_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
00ed2e4dcadb41354c48c91cd2e1e670_NeikiAnalytics.exe
-
Size
91KB
-
MD5
00ed2e4dcadb41354c48c91cd2e1e670
-
SHA1
98ea72fc1895d14b6552bb446e2b436efe3a9460
-
SHA256
d27e4c6535b8a3e98905200c6283d0cc0b2394c0a5386f8abf645b04a749d680
-
SHA512
1100da3738a0d0c951be3ca1a9d28733ae55c2eb9a983f020b0b2a521041a7a9ff02174a1606fb7b6ac71c179c88a98bf36fdc4246cc5b096a0a77f3f74e347a
-
SSDEEP
768:V0vdNL9vUupWcNa8Zz5iQlmxBuoKgPvkHVyXU:V0vdNLtUuFNa8Zz5iQlmxgoKgXk1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00ed2e4dcadb41354c48c91cd2e1e670_NeikiAnalytics.exe
Files
-
00ed2e4dcadb41354c48c91cd2e1e670_NeikiAnalytics.exe.exe .js windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.pdata Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ