Static task
static1
Behavioral task
behavioral1
Sample
407bf43e09b5d9d1173026b161f68bc53bf7c86c8f98daee53b3ef7605518b67_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
407bf43e09b5d9d1173026b161f68bc53bf7c86c8f98daee53b3ef7605518b67_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
407bf43e09b5d9d1173026b161f68bc53bf7c86c8f98daee53b3ef7605518b67_NeikiAnalytics.exe
-
Size
256KB
-
MD5
6a19ab842d36dc74fc6a510032abbc00
-
SHA1
550abc71962f765ba5fc868f758d224c28e22dff
-
SHA256
407bf43e09b5d9d1173026b161f68bc53bf7c86c8f98daee53b3ef7605518b67
-
SHA512
2d59d2e2d630eb44e0a1e71ed3982eb158137fcb293d278414827b1c480cb1a9e93485d2418bd500547d5b23dae642cb833129696fcc8ca28330242ac523912b
-
SSDEEP
3072:GJ+IcrDo2u+uP5d6zRul/tUtcbvYT/Z+q6XDYA8Y4SJXYVi2eBo99oUeCEJYYvus:GA62GB6Ylq4yLFSdz2k/JrAV400
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 407bf43e09b5d9d1173026b161f68bc53bf7c86c8f98daee53b3ef7605518b67_NeikiAnalytics.exe
Files
-
407bf43e09b5d9d1173026b161f68bc53bf7c86c8f98daee53b3ef7605518b67_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.rsrc Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 9KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ