Static task
static1
Behavioral task
behavioral1
Sample
331f71a50c1e78c6674672c8e191f7c0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
331f71a50c1e78c6674672c8e191f7c0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
331f71a50c1e78c6674672c8e191f7c0_NeikiAnalytics.exe
-
Size
14KB
-
MD5
331f71a50c1e78c6674672c8e191f7c0
-
SHA1
645792c1b8071a385092f312405993092c0937f9
-
SHA256
e38588b482d2e91d3468caf9a4b91081bad80bb7fa06f5cfe532daf5c76a3c11
-
SHA512
0ee7ef2da6c80c6556fbe0de854c36ec020db3340b618f631f3a495a85fcd8b11b2b25966e54b3747e91e09fb82bbf17b8b8bc7493b77e007327531870d2c7c6
-
SSDEEP
192:oXQOvwQQk+9YVKiK0HhYGDDDDDDDDDDDDDDDx/X52E7n4bDca/qDE045HQdSuxSs:+HjVAAAyDE045HoSuxSuxSuxSux
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 331f71a50c1e78c6674672c8e191f7c0_NeikiAnalytics.exe
Files
-
331f71a50c1e78c6674672c8e191f7c0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ