Static task
static1
Behavioral task
behavioral1
Sample
1e422cd741facf035adba5d62a3c9a9f1464ad1d9b41217e92e24d92423dd5c4_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1e422cd741facf035adba5d62a3c9a9f1464ad1d9b41217e92e24d92423dd5c4_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
1e422cd741facf035adba5d62a3c9a9f1464ad1d9b41217e92e24d92423dd5c4_NeikiAnalytics.exe
-
Size
1.2MB
-
MD5
5cefb983959b30d29bfd9ba8168f4f70
-
SHA1
869273dd754eeb30da89d0046c5b917911a47b3b
-
SHA256
1e422cd741facf035adba5d62a3c9a9f1464ad1d9b41217e92e24d92423dd5c4
-
SHA512
5617e1345f153d2225e7d2a0ee2f0aec934532a7201bfbf6f738501b40de830908b0d5f67f876e9f8f3f456aa8bb9cbcfae340f6619eb0c5de89a7576ec8ba6a
-
SSDEEP
24576:rL7UGqb6rEB5yhbeu7kaxmTkqxUYTajMXhLyV/Q0MGGvk5gpcsveSA:rUGqbGnh/7kaYwq2aAAOS0MGjgJGSA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e422cd741facf035adba5d62a3c9a9f1464ad1d9b41217e92e24d92423dd5c4_NeikiAnalytics.exe
Files
-
1e422cd741facf035adba5d62a3c9a9f1464ad1d9b41217e92e24d92423dd5c4_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
2c46jenw Size: 37KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
21e9kzps Size: 5KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
y266qpab Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 947KB - Virtual size: 948KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE