Static task
static1
Behavioral task
behavioral1
Sample
71ffbb3cc848fc1271cefa2a6aa17740_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
71ffbb3cc848fc1271cefa2a6aa17740_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
71ffbb3cc848fc1271cefa2a6aa17740_NeikiAnalytics.exe
-
Size
470KB
-
MD5
71ffbb3cc848fc1271cefa2a6aa17740
-
SHA1
98993a668291cf25d221201795fcab8ee1fe7e30
-
SHA256
204d977593b890f486142d222a4c47ec173fb58b589a6ded1f9fbb592ad6bf78
-
SHA512
f64c963bde9c9e7a393fde81575e4f5d30dd8962bdec2380e9fd68b48e60259ee5cb7d19b8753fc22d08ab417e1fcaf1340840988ec3f0cd382a555f4ffff428
-
SSDEEP
6144:it03a62hzpSNxV2qcJVLNyTiY6wDyIJ2r/bl4fis:Os52hzpHq8eTi30yIQrDl8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71ffbb3cc848fc1271cefa2a6aa17740_NeikiAnalytics.exe
Files
-
71ffbb3cc848fc1271cefa2a6aa17740_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
packerBY Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE