Static task
static1
Behavioral task
behavioral1
Sample
8d9d783fea7e59812d26623fb6ec78f0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8d9d783fea7e59812d26623fb6ec78f0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
8d9d783fea7e59812d26623fb6ec78f0_NeikiAnalytics.exe
-
Size
14KB
-
MD5
8d9d783fea7e59812d26623fb6ec78f0
-
SHA1
bbb4471f60545863463199a0c4d91fd2d666ac57
-
SHA256
c92b7d80084db6fe7a6da5ccf6490bf89dc7cc242e69692aab9f4a3679b18917
-
SHA512
be07ae6160d5a807d4b707889bdd36fa7f22e0ff8efab97c57c142ec6d089ea018369d32d754ca5b9b17c46383ba3748e105bf7468e8baed8f63358c0a7922b7
-
SSDEEP
192:RrQ/CdRXUodqphlfx48QxYHU4RJxD2btYMyYfREchTu4qhcYsdq05hqDE045HQBR:lQKUodoh1x4G7RvqtoYRjUlDE045H0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d9d783fea7e59812d26623fb6ec78f0_NeikiAnalytics.exe
Files
-
8d9d783fea7e59812d26623fb6ec78f0_NeikiAnalytics.exe.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ