Static task
static1
Behavioral task
behavioral1
Sample
8b248d83e0b60766dff4f192b1e3bb90_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8b248d83e0b60766dff4f192b1e3bb90_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
8b248d83e0b60766dff4f192b1e3bb90_NeikiAnalytics.exe
-
Size
4.6MB
-
MD5
8b248d83e0b60766dff4f192b1e3bb90
-
SHA1
94708d414aa0b1c0398ba6ff981e0d1c56f7fe59
-
SHA256
bb6b0fae589dddd568a8a77320b9385d761f255a87bea5d56b4bac182ab73f78
-
SHA512
9fb44fe409e71c6176d6df93f4a8a08d7466ce4abeae8fe6bf97db96772bf7ec0475e358fe2e8428ca940444ec9eb4b59d213e40d554f585ab2c18d0f6a007fe
-
SSDEEP
1536:zh5Pv5Sf/UzwPLhA7FOlawdEsm4OBHN5:lBvEf/UzSLhILwyjXt5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b248d83e0b60766dff4f192b1e3bb90_NeikiAnalytics.exe
Files
-
8b248d83e0b60766dff4f192b1e3bb90_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 60KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���Ƶ�� Size: 2504.6MB - Virtual size: 4096.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
brgjpura Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kmxanpzk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE