Static task
static1
Behavioral task
behavioral1
Sample
88f4719fc7d594c50a66f33c2a93b7e0_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
88f4719fc7d594c50a66f33c2a93b7e0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
88f4719fc7d594c50a66f33c2a93b7e0_NeikiAnalytics
-
Size
320KB
-
MD5
88f4719fc7d594c50a66f33c2a93b7e0
-
SHA1
348256120e129e81b191ea25764f69f68d480150
-
SHA256
01af93f54d5128ce0c840830ddda035c658358e019b1987600b0d8b327b5ccee
-
SHA512
05370c25f89a86afabac5aaa0becd98725d1f6fd40d365d5fd98ba61aededaa91b2d7d2fe524915056355528ccf1841a1b0af3f28efbef8349116ed6654d0ded
-
SSDEEP
6144:rYfcAGj7H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:OGP2EB0NxDIBuOFe7/uT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88f4719fc7d594c50a66f33c2a93b7e0_NeikiAnalytics
Files
-
88f4719fc7d594c50a66f33c2a93b7e0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
5f4ba0bf1468f13fadb8f328c302d0d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VDMOperationStarted
RemoveDirectoryA
WriteConsoleInputVDMA
CreateJobSet
VirtualQuery
Heap32ListNext
GlobalLock
GetNativeSystemInfo
WriteProfileSectionW
FindFirstFileA
GetDefaultCommConfigA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE