Static task
static1
Behavioral task
behavioral1
Sample
4b897d4141af7940bb003f0c67c8ca680c2c05606244361031ccfccb9c5f0dd6_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4b897d4141af7940bb003f0c67c8ca680c2c05606244361031ccfccb9c5f0dd6_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
4b897d4141af7940bb003f0c67c8ca680c2c05606244361031ccfccb9c5f0dd6_NeikiAnalytics.exe
-
Size
64KB
-
MD5
0925b270bb4ad57f89aa38e2d0682540
-
SHA1
4608fdbdf4f801fca19da7fabfff87dbfe95c9ce
-
SHA256
4b897d4141af7940bb003f0c67c8ca680c2c05606244361031ccfccb9c5f0dd6
-
SHA512
3b9f7dfb663c425820b035d5efd88afde2683b88ad7cf6f41b04700132acc84374b0fa82d23a0c0abe00c73a25a4787edd70f3cbe3914fa711b0c7a3ac7abda3
-
SSDEEP
1536:hQ3nOadfeKOGXTXOug4iUXruCHcpzt/Idn:hSnpVe2XSugNpFwn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b897d4141af7940bb003f0c67c8ca680c2c05606244361031ccfccb9c5f0dd6_NeikiAnalytics.exe
Files
-
4b897d4141af7940bb003f0c67c8ca680c2c05606244361031ccfccb9c5f0dd6_NeikiAnalytics.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ