Static task
static1
Behavioral task
behavioral1
Sample
4c208a2dd2ebf49bca5c84b0a4978670_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4c208a2dd2ebf49bca5c84b0a4978670_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
4c208a2dd2ebf49bca5c84b0a4978670_NeikiAnalytics
-
Size
2.2MB
-
MD5
4c208a2dd2ebf49bca5c84b0a4978670
-
SHA1
a1ae55690f703c7079c0cdbfe58511323cd050dc
-
SHA256
b895c65933e8d53d3383292bf4c24975f21f32feee9358a5d4e2c7446f1c147c
-
SHA512
70a3ba5c4ca03a8946c4aa43772e2aa4e5354b1a442ec0acb7b4a2463ffb1a5c9a93af294dfa9758deaef44363a9ca750a061204799dce5962f561560beb2cfc
-
SSDEEP
49152:y4jtPq4h5uvijr82lcNdL+pK99gZ24JFXhFJaGJGNapch7:yAtPla0mdL+IEFv6l7
Malware Config
Signatures
Files
-
4c208a2dd2ebf49bca5c84b0a4978670_NeikiAnalytics.exe windows:6 windows x86 arch:x86
Code Sign
37:48:71:5a:bc:5b:d1:ad:41:1f:40:80:eb:07:09:e4Certificate
IssuerCN=Perecotrothiste Melody AssistantNot Before06/02/2023, 08:00Not After06/02/2024, 08:00SubjectCN=Perecotrothiste Melody Assistant92:d7:99:09:62:59:20:5f:27:d2:fd:12:11:b2:e0:6a:ea:f9:59:e0:03:fa:c1:cc:42:c6:65:53:d2:2f:84:86Signer
Actual PE Digest92:d7:99:09:62:59:20:5f:27:d2:fd:12:11:b2:e0:6a:ea:f9:59:e0:03:fa:c1:cc:42:c6:65:53:d2:2f:84:86Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 813KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 138KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 671KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 73KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 520KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE