Static task
static1
Behavioral task
behavioral1
Sample
8c9ebe05e561cfab7c9ba90bcc245e40_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8c9ebe05e561cfab7c9ba90bcc245e40_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
8c9ebe05e561cfab7c9ba90bcc245e40_NeikiAnalytics
-
Size
43KB
-
MD5
8c9ebe05e561cfab7c9ba90bcc245e40
-
SHA1
eaf507a2b398ff3d958c15db0bc98c6499a2c0b8
-
SHA256
d819481a834530aac4df13c2399ffb0bbb7844d6f4ec737995e40a9526ca62ca
-
SHA512
d26669f20584a9ca4e2f7ddaaffec31ada57d3f9d20d653b9da5abed316c79f28a147b5edd8e1f08b6ef265450fd487c5e5939b9c61f02fbb6d7675edf1dbef3
-
SSDEEP
768:lU8GHfycOo+2+TTzElDkuUUpW61DoYW0Q+hEmgQhWwZQF4uw59Tmq:rGHfoDTTzElro6JBh/6OJ5mq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c9ebe05e561cfab7c9ba90bcc245e40_NeikiAnalytics
Files
-
8c9ebe05e561cfab7c9ba90bcc245e40_NeikiAnalytics.exe windows:4 windows x86 arch:x86
34280472c47b2968154a8bef9c9202f0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FlushFileBuffers
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetFilePointer
SetUnhandledExceptionFilter
Sleep
WideCharToMultiByte
WriteFile
msvcrt
_stat
_strdup
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_filbuf
_filelengthi64
_get_osfhandle
_iob
_onexit
_osver
_setmode
_stricmp
abort
atexit
calloc
exit
fclose
fflush
fgetpos
fopen
fputc
fread
free
fseek
fsetpos
ftell
fwrite
getenv
localeconv
malloc
memcmp
memcpy
memmove
realloc
rewind
signal
strcmp
strcpy
strerror
strlen
strtoul
wcslen
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE