Static task
static1
Behavioral task
behavioral1
Sample
9e8d5386eaf59a2bf395e316ca85e7cb0d0396b9cc2a0d0f325937f1762810a2_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
9e8d5386eaf59a2bf395e316ca85e7cb0d0396b9cc2a0d0f325937f1762810a2_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
9e8d5386eaf59a2bf395e316ca85e7cb0d0396b9cc2a0d0f325937f1762810a2_NeikiAnalytics.exe
-
Size
64KB
-
MD5
ab08a5cc6ecde242f392b3afa9d51980
-
SHA1
6bd90629db6d0620935470d7b29f9aed6e7b0184
-
SHA256
9e8d5386eaf59a2bf395e316ca85e7cb0d0396b9cc2a0d0f325937f1762810a2
-
SHA512
8c714d80f35376912d6540252ee08cb02c2eee7164c5d1419394a19759e8e042414454866aafbbcc40d68f9826d8bf441c1a13ea79f80588ca7048c9be0be6d4
-
SSDEEP
768:EfBMWD/IUJck8u85r2iV0JHsks++916EjWbkeMg2wsiq/1H5wXdnhgl72KNtL4wF:E2OIUqkCr2fHsks++98kWbk/NUgNtn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9e8d5386eaf59a2bf395e316ca85e7cb0d0396b9cc2a0d0f325937f1762810a2_NeikiAnalytics.exe
Files
-
9e8d5386eaf59a2bf395e316ca85e7cb0d0396b9cc2a0d0f325937f1762810a2_NeikiAnalytics.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ