Static task
static1
Behavioral task
behavioral1
Sample
32e92fef65f63899cdc80c498959deb0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
32e92fef65f63899cdc80c498959deb0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
32e92fef65f63899cdc80c498959deb0_NeikiAnalytics
-
Size
72KB
-
MD5
32e92fef65f63899cdc80c498959deb0
-
SHA1
8f9976282ee751c24600b85da17de3d85943f68d
-
SHA256
a9f0d811d2ae487738a1f98e6216ea7ec3fee02916764cb7f0712caf55fe8ff3
-
SHA512
30dded6afe30f6d2f6ba399e3cac310458e9f2d47f0e8f112981b7304c6c882c369d8be1a93587e81a3233934b1e51a813261c5eb193bdf56db01e41f545e76c
-
SSDEEP
768:x/nLsOotoORa9BtsKq59qixs6LD908odASouD/7Vs6U2Y6AdYLSQhOUul8AeiRpt:xTxd9IKubv9svDzhkiLSQoUulHei26/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32e92fef65f63899cdc80c498959deb0_NeikiAnalytics
Files
-
32e92fef65f63899cdc80c498959deb0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
0c144496adf6d6951a8195019d714846
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile
Sections
.text Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE