Static task
static1
Behavioral task
behavioral1
Sample
8a49bac84b3bc46ac2c9d57d546b7c26e79cfbfaf96c901f92fbc1eda98238e6_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8a49bac84b3bc46ac2c9d57d546b7c26e79cfbfaf96c901f92fbc1eda98238e6_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
8a49bac84b3bc46ac2c9d57d546b7c26e79cfbfaf96c901f92fbc1eda98238e6_NeikiAnalytics.exe
-
Size
2.7MB
-
MD5
7ef99f0974d8c3fe80d8c8cc79e8fd70
-
SHA1
1bbd60008b9110fee11e24aedf3fade819a727cd
-
SHA256
8a49bac84b3bc46ac2c9d57d546b7c26e79cfbfaf96c901f92fbc1eda98238e6
-
SHA512
0e8a6cdb25b40a4c3f9a4866060f4f29eb4329f38b79d3b1bb3f91b49779a39e547dc3fd684c6c0feff29ee267e2dd62ecbd9addd2474b03c432da7c0c8d0741
-
SSDEEP
49152:9ayT+P66XbOP/ZzA2DItg1Hoaz6wecYfFkURwlhyAuLjf/IVgs5+xP:TTE66yXZ02DwUHoazRofxIhELjf/IVgs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a49bac84b3bc46ac2c9d57d546b7c26e79cfbfaf96c901f92fbc1eda98238e6_NeikiAnalytics.exe
Files
-
8a49bac84b3bc46ac2c9d57d546b7c26e79cfbfaf96c901f92fbc1eda98238e6_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ