Static task
static1
Behavioral task
behavioral1
Sample
29661a658bb8b999f791a502e2c49650_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
29661a658bb8b999f791a502e2c49650_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
29661a658bb8b999f791a502e2c49650_NeikiAnalytics
-
Size
359KB
-
MD5
29661a658bb8b999f791a502e2c49650
-
SHA1
6d5c7e8b9c19ee39b41267073143dbb85022b8f9
-
SHA256
80437aa0461ff146d35441fa18eee3d63e843a857fd3369e3d2024970da27257
-
SHA512
51888acae6755c29b91a7da7b7acd2a64a284afd721a6086ee0ba73310f4a745b21fec77454a22fe7ec9a01035809c51f49bc96739ef7a003136fe8840f3ca5f
-
SSDEEP
6144:VafcEHI/prnm4y3NjTjuC8xOcxphONs6+X7jINs6+X7j:IHIhnmn9jT836+X/l6+X/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29661a658bb8b999f791a502e2c49650_NeikiAnalytics
Files
-
29661a658bb8b999f791a502e2c49650_NeikiAnalytics.exe windows:4 windows x86 arch:x86
3e3d633779e35448851e7a9ca7e72522
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
ole32
CoInitialize
Sections
.MPRESS1 Size: 163KB - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE