Static task
static1
Behavioral task
behavioral1
Sample
22b7e01b423a1797772693e6c593c710_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
22b7e01b423a1797772693e6c593c710_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
22b7e01b423a1797772693e6c593c710_NeikiAnalytics
-
Size
24KB
-
MD5
22b7e01b423a1797772693e6c593c710
-
SHA1
b7b1c706d0d4bee5fdc3592ceb1ce5210a7545a6
-
SHA256
ab681592d5281369715588b8965e3ec3036d30c9b70f5a2878b5e5dda88e1ecc
-
SHA512
82e7091a1ba50e0883d1f5ae060c81c0071bf54584b50355ee07d6ce393eaa465c5e1ffdd4bf1a235f940cb7813d5c28ff1775c4dbcced2f4edde3344346720e
-
SSDEEP
384:LkDozDI/RndLVSRk/zotqd1bQ6tL4H1ntqFz+tZqPdRT2jXpmmzM:XA/RQqIa+6BMgF+YRCja
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22b7e01b423a1797772693e6c593c710_NeikiAnalytics
Files
-
22b7e01b423a1797772693e6c593c710_NeikiAnalytics.exe windows:4 windows x86 arch:x86
bd2d0fb6652da7d0284fd7bf88229c4c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DeferWindowPos
DestroyIcon
CreatePopupMenu
DestroyAcceleratorTable
UpdateWindow
ShowWindow
PostQuitMessage
DefWindowProcW
SendMessageW
LoadIconW
LoadCursorW
DispatchMessageW
GetMessageW
CreateWindowExW
RegisterClassExW
DestroyCursor
PostMessageW
DestroyCaret
CreateMenu
kernel32
GetModuleHandleA
HeapAlloc
GetProcessHeap
GetStartupInfoA
HeapFree
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.htext Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE