Static task
static1
Behavioral task
behavioral1
Sample
8aad195d60c395b54ac21f1007be72aa6f59bd6baa07c2425cc56429a73fbaf5_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
8aad195d60c395b54ac21f1007be72aa6f59bd6baa07c2425cc56429a73fbaf5_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
8aad195d60c395b54ac21f1007be72aa6f59bd6baa07c2425cc56429a73fbaf5_NeikiAnalytics.exe
-
Size
163KB
-
MD5
89190f55c0119009d345c9cf7c5f35c0
-
SHA1
a3dddabf8c9688afce2c353aaf370d719380d53f
-
SHA256
8aad195d60c395b54ac21f1007be72aa6f59bd6baa07c2425cc56429a73fbaf5
-
SHA512
e055ebbfdb9f80ce41d615bf1fb5ce65006f1bbbcbb52c6a3dd15aa6a0578f1688fb7e7ca57393612e8846f866d9e9be4602d0700357e65d80d2a7de06602810
-
SSDEEP
3072:a/EdvECMdpcTVfj0joUY5DqjNwvnfdlKbAmcPJVXcx:a/EXeeuovMinHeePJy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8aad195d60c395b54ac21f1007be72aa6f59bd6baa07c2425cc56429a73fbaf5_NeikiAnalytics.exe
Files
-
8aad195d60c395b54ac21f1007be72aa6f59bd6baa07c2425cc56429a73fbaf5_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 104KB - Virtual size: 104KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gdoqb Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.uwi Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ