Static task
static1
Behavioral task
behavioral1
Sample
355162d216567c9ce3a0a6d21c1c66253e30c487076f9ab526c65b9f7902e008_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
355162d216567c9ce3a0a6d21c1c66253e30c487076f9ab526c65b9f7902e008_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
355162d216567c9ce3a0a6d21c1c66253e30c487076f9ab526c65b9f7902e008_NeikiAnalytics.exe
-
Size
479KB
-
MD5
bc0f1a6f5c5ad0fb628a76ae28caca20
-
SHA1
97bf061842086447b5e70a09bf99852b322166ed
-
SHA256
355162d216567c9ce3a0a6d21c1c66253e30c487076f9ab526c65b9f7902e008
-
SHA512
ff525c2ba14c34b20a20c508c3f0556991ae022b3d8dc45a09a36d9c4c7586de6043d5250b7d3f1e6142098c3b684023bbe8075143c9b007f55b3c74d5222bfa
-
SSDEEP
12288:LNlc87eqqV5e+wBV6O+IY7X9XeVcDEP5SpZJu4XK:LNSqqHeVBxeb9X6uiSpTbK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 355162d216567c9ce3a0a6d21c1c66253e30c487076f9ab526c65b9f7902e008_NeikiAnalytics.exe
Files
-
355162d216567c9ce3a0a6d21c1c66253e30c487076f9ab526c65b9f7902e008_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 229KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l2 Size: 229KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ