Static task
static1
Behavioral task
behavioral1
Sample
2d556f60de303183617d8438b37761c0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2d556f60de303183617d8438b37761c0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
2d556f60de303183617d8438b37761c0_NeikiAnalytics
-
Size
129KB
-
MD5
2d556f60de303183617d8438b37761c0
-
SHA1
a54dcce244ce7171af63c98a826d0a0da9923b07
-
SHA256
e0e6b998daf23708d1d054917d13f6528ce4da15ff4bd547487aea14b78ea57f
-
SHA512
dc8e4c73e9d4269edf3e62007b3c1b7f177b5d8a1736c24ee365d1e944dea8a08a6bd8d689f106cbf6b177a32184d6191d5c432c16e75c40df1b00dcf77d635a
-
SSDEEP
3072:0RtdEI2MyzNO2GUzPWtdEI2MyzNORQtOflIwoHNM2XBFV7WB7lx7+srtE896:WtdEI2MyzNOmz+tdEI2MyzNORQtOfl1M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d556f60de303183617d8438b37761c0_NeikiAnalytics
Files
-
2d556f60de303183617d8438b37761c0_NeikiAnalytics.exe windows:5 windows x86 arch:x86
d49d59a6fd3b08b6c9c9979cf34e9b21
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UpdateWindow
ShowWindow
PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
SendMessageA
FillRect
GetDC
GetWindowRect
SetFocus
kernel32
GetLastError
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FindClose
FindNextFileA
DeleteFileA
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
GetEnvironmentStringsA
gdi32
CreatePen
CreateFontIndirectA
BitBlt
Sections
����t Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����ta Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����a Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE