Static task
static1
Behavioral task
behavioral1
Sample
899d79e2d8d9b11983484775fc4627e0_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
899d79e2d8d9b11983484775fc4627e0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
899d79e2d8d9b11983484775fc4627e0_NeikiAnalytics.exe
-
Size
468KB
-
MD5
899d79e2d8d9b11983484775fc4627e0
-
SHA1
ad00a83f79039411105e09c1faa0665ed8504c33
-
SHA256
f92a9e230de95f0c3ff12c1f4711f4283260f69798b1c2aaa5c962855202d358
-
SHA512
7e9400b05ebcccc3686cbc2f09f334ad68f7102d9b1450e34256868faa5bcafd734a833ef4edcb3874200e802491641c7a5e359d60eb381b22005d3d3f27665e
-
SSDEEP
3072:DQAUogIdI05UtbYRzztjcf8/EChvaIpjxmHexVhMcjD87XVu3klu:DQHow8UtGzJjcfr0H6cjwTVu3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 899d79e2d8d9b11983484775fc4627e0_NeikiAnalytics.exe
Files
-
899d79e2d8d9b11983484775fc4627e0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12.2MB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 288KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ