Static task
static1
Behavioral task
behavioral1
Sample
17e41e5eff6396ed2e82765b8b097fd547fdd0ba68109554db1f09c18a98da3e_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
17e41e5eff6396ed2e82765b8b097fd547fdd0ba68109554db1f09c18a98da3e_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
17e41e5eff6396ed2e82765b8b097fd547fdd0ba68109554db1f09c18a98da3e_NeikiAnalytics.exe
-
Size
64KB
-
MD5
dea5793b0146536b6258026ad8c2b930
-
SHA1
e138f186ca55521bb8082b54db25f423eea78133
-
SHA256
17e41e5eff6396ed2e82765b8b097fd547fdd0ba68109554db1f09c18a98da3e
-
SHA512
6d0d5efbca3a080df9412eb99b8692494d1c078dfb977419ce8eb5b107ff40a952b548ada2722315812fb63bdcb6dfc6e7a1ce4a91c92dd414a13b1e4704606e
-
SSDEEP
768:DylT56Gf92xfBN/GrXbUFXRttB7jBCNv/XcTGqWl2CUWEnFs3p8bLetO4/1H5TXL:itfEx8XzBMbk2Cj+Lry7V1iL+iALMH6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17e41e5eff6396ed2e82765b8b097fd547fdd0ba68109554db1f09c18a98da3e_NeikiAnalytics.exe
Files
-
17e41e5eff6396ed2e82765b8b097fd547fdd0ba68109554db1f09c18a98da3e_NeikiAnalytics.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ