Static task
static1
Behavioral task
behavioral1
Sample
348c31494daab7233e8539dff46fb12919812e653767cfa1cb8d743748b25a47_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
348c31494daab7233e8539dff46fb12919812e653767cfa1cb8d743748b25a47_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
348c31494daab7233e8539dff46fb12919812e653767cfa1cb8d743748b25a47_NeikiAnalytics.exe
-
Size
256KB
-
MD5
4d607a036cb0c88bb744ed4caf88e560
-
SHA1
9a7384ac2573527a183f83bb0340635f18033073
-
SHA256
348c31494daab7233e8539dff46fb12919812e653767cfa1cb8d743748b25a47
-
SHA512
96e59133ed34dd0a63496ebbb09b459ffcd887740efdf2ed3eee81b3e8fc7b2e8bf0141977b4acf140f7947a053a08e5acb63570a7be13587d68743c545d1335
-
SSDEEP
6144:arg6rMSPXuapoaCPXbo92ynnZlVrtv35CPXbo92ynnH:arg6rRuqFHRD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 348c31494daab7233e8539dff46fb12919812e653767cfa1cb8d743748b25a47_NeikiAnalytics.exe
Files
-
348c31494daab7233e8539dff46fb12919812e653767cfa1cb8d743748b25a47_NeikiAnalytics.exe.exe .ps1 windows:1 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kofbl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wixburn Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ