Static task
static1
Behavioral task
behavioral1
Sample
3a6b5a0635b0bc1dbfcdd1222d09bfd0_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
3a6b5a0635b0bc1dbfcdd1222d09bfd0_NeikiAnalytics
-
Size
413KB
-
MD5
3a6b5a0635b0bc1dbfcdd1222d09bfd0
-
SHA1
127902b88bd5c85ea3b7cabb89b9e9d493120b2d
-
SHA256
a5d77067d8f9ac95f9a3f433fb259904f22497d1b809a29880ef42ed8b41f2b8
-
SHA512
1aa3840b3aabe15611c90c4d18d5e720ea8b10617d5f9bb7234de0f4f444a2167118c267ab473510d0dffbf1a2e9060174b03c2363cbf085770eb750db3a7b26
-
SSDEEP
6144:bS5XDCmayv02xs7PCt43A7qFqYeAbU9CIxxqbFG9hTRzBSAyiwi/BEku0R72Wqgz:sZmC63nFNerrbqg/N0Di/U0lqgZLo8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a6b5a0635b0bc1dbfcdd1222d09bfd0_NeikiAnalytics
Files
-
3a6b5a0635b0bc1dbfcdd1222d09bfd0_NeikiAnalytics.exe windows:5 windows x86 arch:x86
06ef33a1c45fdabdfa5b6e2e08bce5aa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
LoadCursorW
advapi32
RegQueryValueExW
shell32
ShellExecuteA
ws2_32
htonl
iphlpapi
GetAdaptersInfo
Sections
.text Size: 376KB - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 24B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE