Static task
static1
Behavioral task
behavioral1
Sample
66aa61e4bef84db42d6891dc75d32170_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
66aa61e4bef84db42d6891dc75d32170_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
66aa61e4bef84db42d6891dc75d32170_NeikiAnalytics
-
Size
22KB
-
MD5
66aa61e4bef84db42d6891dc75d32170
-
SHA1
435ebfa379906598bb53e2364d7784d819214f19
-
SHA256
f60a5b205f256ecbb20b91b946b3a31f44c03804161e8ca012e231f9052c0a32
-
SHA512
6626bcf2755e48a95ea61beb39d3d9b9e24fa6c40ab44d89b821105139d473d75846ba81431da189620a2a1ba6269e088b3b1e19b718bf634a68ff6fa66b3b54
-
SSDEEP
192:qytgAeuB2S7FFWlSkABcI+EWL/hTUozHLYDo2SIcIn8/wKUlT8AF8ST:qySFpcI5pTUo7L2FSmnmwKUl4AF8ST
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66aa61e4bef84db42d6891dc75d32170_NeikiAnalytics
Files
-
66aa61e4bef84db42d6891dc75d32170_NeikiAnalytics.exe windows:4 windows x86 arch:x86
72c716384ea0a2091fb58c5c9a356b6f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
SendMessageA
GetWindowRect
kernel32
GetStartupInfoA
GetModuleFileNameA
lstrcatA
CloseHandle
HeapCreate
GetModuleHandleA
HeapAlloc
GetProcessHeap
LoadLibraryA
gdi32
GetTextExtentPoint32W
SelectObject
TextOutW
comdlg32
GetSaveFileNameW
GetFileTitleW
comctl32
ord17
ole32
CoTaskMemFree
CoTaskMemAlloc
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 914B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ