Static task
static1
Behavioral task
behavioral1
Sample
5762ad5921049d1eef2697d78529c6e6459f939cc8f74be17ecd1cb12cb0962b_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
5762ad5921049d1eef2697d78529c6e6459f939cc8f74be17ecd1cb12cb0962b_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
5762ad5921049d1eef2697d78529c6e6459f939cc8f74be17ecd1cb12cb0962b_NeikiAnalytics.exe
-
Size
399KB
-
MD5
34d33dacee4a854080e6971af07fcda0
-
SHA1
15c76ed381f687147258ca3ee9a652efab6f3f7c
-
SHA256
5762ad5921049d1eef2697d78529c6e6459f939cc8f74be17ecd1cb12cb0962b
-
SHA512
3215c0b96a7c2bc9b1bcb615c49e635a633024f4f81b5659fe4d5c4e6541a096be12811e5095b4e7af038d99ae0ce6ed1670997aa159b69c2b86caae5bff2a81
-
SSDEEP
12288:vXCYUmm6lszh81OlqDheSDpkSS7R+Y9erD:/CYyksF8FlW37R+MQD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5762ad5921049d1eef2697d78529c6e6459f939cc8f74be17ecd1cb12cb0962b_NeikiAnalytics.exe
Files
-
5762ad5921049d1eef2697d78529c6e6459f939cc8f74be17ecd1cb12cb0962b_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.yPV Size: - Virtual size: 191KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.0oF Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.VH6 Size: 376KB - Virtual size: 375KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ