Static task
static1
Behavioral task
behavioral1
Sample
7152f08e9584e2108c675fe4ac784d2792e4815ff909eeb25841b3f5976d3af7_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
7152f08e9584e2108c675fe4ac784d2792e4815ff909eeb25841b3f5976d3af7_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
7152f08e9584e2108c675fe4ac784d2792e4815ff909eeb25841b3f5976d3af7_NeikiAnalytics.exe
-
Size
482KB
-
MD5
e774c05b3dc2a7ad8b2979fe82aa2930
-
SHA1
44defeec3301862572a6d64ac5f6927e2c6d3a77
-
SHA256
7152f08e9584e2108c675fe4ac784d2792e4815ff909eeb25841b3f5976d3af7
-
SHA512
2972fa7920ba2f17f445518bbfa4ae15d8c3be34b4f7a83af8051ff66f8938989c2a5279f2cbb9cdbd92e60f59a0b28a135c96c630f903b58ea5fcf6bfaa3743
-
SSDEEP
12288:uMlc87eqqV5e+wBV6O+mhv8uAyDhMOC6W/0lpd:uMSqqHeVBxSm1MOK0lpd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7152f08e9584e2108c675fe4ac784d2792e4815ff909eeb25841b3f5976d3af7_NeikiAnalytics.exe
Files
-
7152f08e9584e2108c675fe4ac784d2792e4815ff909eeb25841b3f5976d3af7_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 229KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 229KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ