Static task
static1
Behavioral task
behavioral1
Sample
79b79b3a820e553240f924f4e16051f23951b4eedb91f7b20fd99165c300ae09_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
79b79b3a820e553240f924f4e16051f23951b4eedb91f7b20fd99165c300ae09_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
79b79b3a820e553240f924f4e16051f23951b4eedb91f7b20fd99165c300ae09_NeikiAnalytics.exe
-
Size
1.4MB
-
MD5
2fe5377f74c0e54604b3e524d8a85e60
-
SHA1
ccc9d885f8d3cd214c1cd5a7f45b931c8f91dcf8
-
SHA256
79b79b3a820e553240f924f4e16051f23951b4eedb91f7b20fd99165c300ae09
-
SHA512
da830932ef6b15b97c5cf58de146d942791efc55634a442f0fc50364ab064d0a177fa58aa17ffd4bb96ae6d88ae638995a0cf4c8fcedd2deada4a2b5e41e7210
-
SSDEEP
24576:zmLgLpXbQpjz0IVmzI2Iiy4cAff3RyobAI8Hya/ZSa77sFZTDleyJohauNb0XGjm:JluwIOI2Iiy4cq9cNSgFghcyJokuN4Xd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79b79b3a820e553240f924f4e16051f23951b4eedb91f7b20fd99165c300ae09_NeikiAnalytics.exe
Files
-
79b79b3a820e553240f924f4e16051f23951b4eedb91f7b20fd99165c300ae09_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 633KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 9KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ