Static task
static1
Behavioral task
behavioral1
Sample
2447d6048de1b8b19a63b66a48d0a802d6e50a8478c79b47b672a4d7989ca2b8_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2447d6048de1b8b19a63b66a48d0a802d6e50a8478c79b47b672a4d7989ca2b8_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
2447d6048de1b8b19a63b66a48d0a802d6e50a8478c79b47b672a4d7989ca2b8_NeikiAnalytics.exe
-
Size
64KB
-
MD5
d15f45254622aad9a34374a2c2be0360
-
SHA1
f0439773b6139430e78720c6edf271a8e342c231
-
SHA256
2447d6048de1b8b19a63b66a48d0a802d6e50a8478c79b47b672a4d7989ca2b8
-
SHA512
c86b72e6f87b7b8cc6717c32e8829dc939df61bba21c43b258b93eb92d65cc757f46ba9ef72364b9705444b8b8e2ac2892ab79e1e47c2e551ee1fbc7120c8335
-
SSDEEP
1536:GxMaETJfB0lxXuyuJYA/v54AuxteO6XKhbMbt2:GxMroXMdiAQoO6Xjt2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2447d6048de1b8b19a63b66a48d0a802d6e50a8478c79b47b672a4d7989ca2b8_NeikiAnalytics.exe
Files
-
2447d6048de1b8b19a63b66a48d0a802d6e50a8478c79b47b672a4d7989ca2b8_NeikiAnalytics.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mdiapk Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ