Static task
static1
Behavioral task
behavioral1
Sample
20af6a8f9291f23d59d56a1582724cf0_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
20af6a8f9291f23d59d56a1582724cf0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
20af6a8f9291f23d59d56a1582724cf0_NeikiAnalytics.exe
-
Size
209KB
-
MD5
20af6a8f9291f23d59d56a1582724cf0
-
SHA1
6385145a5cf6a1e51d07a8e12bf76513e3d493b7
-
SHA256
b859f01e55f59c4534a5ec20c7cd8962720474f2219865672b24ab3276e413f6
-
SHA512
b1de10552d25fd4e0abcbd1b71f678f819b1001bcab4f4f5a766de2f9486f8f0efd14269bb62e9062b932a77f3fbf21d3bc838e1d978cfe532f13fc9966d4d57
-
SSDEEP
3072:D7qv6i7nWSp/rKrRvcTfQQxjnJr5jQFZrj:DinWSp/rKr5cTRxjJr0Zr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20af6a8f9291f23d59d56a1582724cf0_NeikiAnalytics.exe
Files
-
20af6a8f9291f23d59d56a1582724cf0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 204KB - Virtual size: 756KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE