Static task
static1
Behavioral task
behavioral1
Sample
8c8c8b34cf02ad88aac1567237082130_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8c8c8b34cf02ad88aac1567237082130_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
8c8c8b34cf02ad88aac1567237082130_NeikiAnalytics
-
Size
2.9MB
-
MD5
8c8c8b34cf02ad88aac1567237082130
-
SHA1
e44efeb6b8dee786c61de52985f4e53a62ddb6da
-
SHA256
242a6f3fc77290c2e9e517219f282e2ec2263bd49c9bd9f289a935b3a46f7a4b
-
SHA512
78d40eb902c0514c794f38df45476212b7e3b382236f7a46776a3f5223dcf3932051f5a68e60c03d38d97046ce9a94186ff4100de6c1ebd6da00b435293dd1a6
-
SSDEEP
49152:ntdcc63yz/Sv5XuyxnFJjKf6yNliYsrbFNQtd4GvS0Jr8kPxYPf6sBjNau:nt163yz/SRXNFJEiVrbC4GvS0n+X6Oht
Malware Config
Signatures
Files
-
8c8c8b34cf02ad88aac1567237082130_NeikiAnalytics.exe windows:6 windows x86 arch:x86
Code Sign
7a:cc:5b:56:25:2b:ca:94:48:ac:e2:03:7f:91:ea:d2Certificate
IssuerCN=Adjovinguchi Blustery GroupNot Before05/02/2023, 21:00Not After05/02/2024, 21:00SubjectCN=Adjovinguchi Blustery Group0a:55:89:3c:c6:0d:83:ad:87:93:b1:94:28:03:42:64:b0:a1:6d:a6:82:20:e6:49:3e:d4:5a:14:4e:a8:22:a2Signer
Actual PE Digest0a:55:89:3c:c6:0d:83:ad:87:93:b1:94:28:03:42:64:b0:a1:6d:a6:82:20:e6:49:3e:d4:5a:14:4e:a8:22:a2Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1.9MB - Virtual size: 9.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 292KB - Virtual size: 832KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 223KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 69KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qtmetad Size: 404KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE