Static task
static1
Behavioral task
behavioral1
Sample
94d8d2712c6b0413f10542aa182b2861a897fa35557f314856c434cb42e44bbc_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
94d8d2712c6b0413f10542aa182b2861a897fa35557f314856c434cb42e44bbc_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
94d8d2712c6b0413f10542aa182b2861a897fa35557f314856c434cb42e44bbc_NeikiAnalytics.exe
-
Size
189KB
-
MD5
20a5f704ce3f6d848c36a7d38ca0e6b0
-
SHA1
084909f1b12055a10ee74516c0a8512e4dac5fd1
-
SHA256
94d8d2712c6b0413f10542aa182b2861a897fa35557f314856c434cb42e44bbc
-
SHA512
5d268eda096f66d75880288ebd875b7c8f07f2bf79edab761656eca4cfb3252549673bca647283fa0ba106b5dec0f2fa2ce398f5ae091e533ad5e0935ef6f89f
-
SSDEEP
768:eUM/zX1vqX1vLFB5W5pYJIJDYJIJOO6O2lpHiJOP25LqrH5HiJOP25LqrHpsq5wV:rIWe+eoO6O2lpiMZiMOq5wqequDGGBn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94d8d2712c6b0413f10542aa182b2861a897fa35557f314856c434cb42e44bbc_NeikiAnalytics.exe
Files
-
94d8d2712c6b0413f10542aa182b2861a897fa35557f314856c434cb42e44bbc_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 227KB - Virtual size: 226KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wixburn Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ