Static task
static1
Behavioral task
behavioral1
Sample
194417c563d732915ea9544df83ee5c0_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
194417c563d732915ea9544df83ee5c0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
194417c563d732915ea9544df83ee5c0_NeikiAnalytics
-
Size
24KB
-
MD5
194417c563d732915ea9544df83ee5c0
-
SHA1
f2be017d9abcc7e2968a98c39a953a2a8a3d0756
-
SHA256
f14166524bd35f0554c6cba27b14e43e182f3bfead62496507341f741a1ca631
-
SHA512
36fb07a9de291dc9161e04955a0d21d070aed3a1e2b10e2cc9ce34b6c02a76b8d4e83c4e012b0b4e301abd36a30d924fa961845c90e2cc0416fa20739479036d
-
SSDEEP
384:LkDozDI/RndLVSRk/zotqd1bQ6tL4H1ntqFz+tZqPdRT2jXpDb:XA/RQqIa+6BMgF+YRCjp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 194417c563d732915ea9544df83ee5c0_NeikiAnalytics
Files
-
194417c563d732915ea9544df83ee5c0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
bd2d0fb6652da7d0284fd7bf88229c4c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DeferWindowPos
DestroyIcon
CreatePopupMenu
DestroyAcceleratorTable
UpdateWindow
ShowWindow
PostQuitMessage
DefWindowProcW
SendMessageW
LoadIconW
LoadCursorW
DispatchMessageW
GetMessageW
CreateWindowExW
RegisterClassExW
DestroyCursor
PostMessageW
DestroyCaret
CreateMenu
kernel32
GetModuleHandleA
HeapAlloc
GetProcessHeap
GetStartupInfoA
HeapFree
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.htext Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE