Static task
static1
Behavioral task
behavioral1
Sample
5d129dccff6f2662d3ed7479d0ee0d20_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5d129dccff6f2662d3ed7479d0ee0d20_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
5d129dccff6f2662d3ed7479d0ee0d20_NeikiAnalytics.exe
-
Size
536KB
-
MD5
5d129dccff6f2662d3ed7479d0ee0d20
-
SHA1
3b65c0f405692f5c0b960acc4f1bd69dc55a312c
-
SHA256
a8cae69f84632c4daa4bf80d1cc770f6432dc0daec49d1f1c47bfa904f004bc9
-
SHA512
9c666e1db619f6e92e952827a0a1a60ead291a15bf20b54c66d0d1a0c59b4789c8e674a38e7cbebbc2661ebe385b7572e130330af2fca15cf2fc8dc2c4c4803a
-
SSDEEP
12288:wU5rCOTeiUGBYvUF1ZhnnTt5i8+E3kCJuIZxVJ0ZT9:wUQOJUbvUhZTt5i2vJuIRJ0ZT9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d129dccff6f2662d3ed7479d0ee0d20_NeikiAnalytics.exe
Files
-
5d129dccff6f2662d3ed7479d0ee0d20_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 262KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ