Static task
static1
General
-
Target
28edc389a73dd0aaec3d25ec8e96d0a0_NeikiAnalytics.exe
-
Size
532KB
-
MD5
28edc389a73dd0aaec3d25ec8e96d0a0
-
SHA1
85e7c222228dca824b3347c573067a25ff883879
-
SHA256
b4d866d547dc7506a621e84c3e280350bde9ec7cd6c6a676222626ae02772ec1
-
SHA512
f68b68b16bfe464156423a434ff7adf889ed94e244d457a66d8555272a313818c268791e1852f0aea37a460ae8f9b3002fe4b532a50e04dbd42bd00dfbd3a89f
-
SSDEEP
6144:RrX5Eso/4tmJMMVdZyqy3iXSbReWkhjce7VIqOCUIu0VcZwc9+2gmSo9ab8yNwLZ:tyQac9+2seMNc9OWPl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28edc389a73dd0aaec3d25ec8e96d0a0_NeikiAnalytics.exe
Files
-
28edc389a73dd0aaec3d25ec8e96d0a0_NeikiAnalytics.exe.sys windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 220KB - Virtual size: 219KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PAGESSL Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ