Static task
static1
Behavioral task
behavioral1
Sample
a495330e156d736c6684d5dc97166880_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a495330e156d736c6684d5dc97166880_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
a495330e156d736c6684d5dc97166880_NeikiAnalytics.exe
-
Size
12KB
-
MD5
a495330e156d736c6684d5dc97166880
-
SHA1
f28df3c1532e6e473317336d1f382409646e14b7
-
SHA256
7e09f3a3afb083991a5a3c5cbc9a85d8f2a6f08ff555c55d391c16194a4a3948
-
SHA512
73b38467eef0063111e4ad608f9f939988675c364afeca0176ec492d69f658077d5da421e8eb4aaf93e1503e064fc103723c2c520d2956300ca366ae0e4aab2b
-
SSDEEP
384:BL7li/2zDq2DcEQvdhcJKLTp/NK9xabo:h/M/Q9cbo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a495330e156d736c6684d5dc97166880_NeikiAnalytics.exe
Files
-
a495330e156d736c6684d5dc97166880_NeikiAnalytics.exe.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ