Static task
static1
Behavioral task
behavioral1
Sample
0f5fa26497168d103e258ee4d1e61160_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0f5fa26497168d103e258ee4d1e61160_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
0f5fa26497168d103e258ee4d1e61160_NeikiAnalytics.exe
-
Size
12KB
-
MD5
0f5fa26497168d103e258ee4d1e61160
-
SHA1
1fc77976e0c441fde133b6952480e4d94e0f97ff
-
SHA256
8ee13499f5521d03992eaddf904cef1940cfca08eb7f58c11ff5a54ef8452faa
-
SHA512
34017c226c306c4c07ad4d3a802602457941bbcf5c868e9a7a57940a8583ae306c72f68099af4ba0b4fe1b500ead1684c4a4a08261937a33c9b40c32bdb7b4bf
-
SSDEEP
384:ML7li/2z5q2DcEQvdhcJKLTp/NK9xa22:KRM/Q9c22
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f5fa26497168d103e258ee4d1e61160_NeikiAnalytics.exe
Files
-
0f5fa26497168d103e258ee4d1e61160_NeikiAnalytics.exe.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ