Static task
static1
Behavioral task
behavioral1
Sample
64de8b72ece5b4b20e9d6e67b41e5258c318a32fd7a6036505468b363d6accce_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
64de8b72ece5b4b20e9d6e67b41e5258c318a32fd7a6036505468b363d6accce_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
64de8b72ece5b4b20e9d6e67b41e5258c318a32fd7a6036505468b363d6accce_NeikiAnalytics.exe
-
Size
63KB
-
MD5
719a9ae1214d7d05c607400f8ed87060
-
SHA1
6908fc6e55eb0818fc936d9b5e7343ae6d92e4f2
-
SHA256
64de8b72ece5b4b20e9d6e67b41e5258c318a32fd7a6036505468b363d6accce
-
SHA512
d256496509526e32bca24ad6c778571b7308494618a7a1059b2e94927f2d29e39787085265e9453fe1b27a19e2e980f5761cc8f5e168730e16aa35b25294ad35
-
SSDEEP
768:cTQhSAsu5TbDyvGlG0K8cT1c6C8ty8TjYfexlV/1H5oVEi3amrUTvn93b7NRDMFp:cXu5Lg02TjYk9+VREn9rjDHE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64de8b72ece5b4b20e9d6e67b41e5258c318a32fd7a6036505468b363d6accce_NeikiAnalytics.exe
Files
-
64de8b72ece5b4b20e9d6e67b41e5258c318a32fd7a6036505468b363d6accce_NeikiAnalytics.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didat Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ