Static task
static1
Behavioral task
behavioral1
Sample
6e68752ef5a0abee431a812da48db860_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6e68752ef5a0abee431a812da48db860_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
6e68752ef5a0abee431a812da48db860_NeikiAnalytics.exe
-
Size
7.2MB
-
MD5
6e68752ef5a0abee431a812da48db860
-
SHA1
fb9321b6e05d9ea86d701d072533781de628ccf4
-
SHA256
2508ed2c7e26aad2815ea0d1358685313fc4b14f39a7ea0cdd14aad4801b8afa
-
SHA512
a6c7f77f329f31f31eb3f5d875535a2fe164ab7c73425dd3b24c3c1ae47f6ff808b5769463b9c5f2d9f6a97ed9eacca665819750bfabb3cec3f7afb55546bdfe
-
SSDEEP
196608:Ovvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv:y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e68752ef5a0abee431a812da48db860_NeikiAnalytics.exe
Files
-
6e68752ef5a0abee431a812da48db860_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.orpc Size: 7KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 11KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 24KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE