Static task
static1
Behavioral task
behavioral1
Sample
e358822c271027dc0e8026a2c6840340_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e358822c271027dc0e8026a2c6840340_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
e358822c271027dc0e8026a2c6840340_NeikiAnalytics
-
Size
34KB
-
MD5
e358822c271027dc0e8026a2c6840340
-
SHA1
adb69b0125ac91e1df744a604ca4e4e9ea472be6
-
SHA256
a6341a1e0f1f129f0e6482c6efc563f3a7bb1b118262d9f14b68ad613dbb73ca
-
SHA512
2a8279d17fbd943cf860d1aeaf88710fc1efcaa3ca45220ffb81c14ac9f6e9fe1c8489aeaca821ed5ec09ddd933f47083bf18b77664fdf6061e878ec4bb99933
-
SSDEEP
384:lrd1jR3l1cbELnrfjoRWw32UcPykQtr/S53DDELZhAbRx5ISm/P5UPStL6nuMf:NvasrfjGW4xcPyzt25TALOi/PIEe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e358822c271027dc0e8026a2c6840340_NeikiAnalytics
Files
-
e358822c271027dc0e8026a2c6840340_NeikiAnalytics.exe windows:5 windows x86 arch:x86
93f3c3f7fa917eec6b457a216663e185
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessageA
PostQuitMessage
DispatchMessageA
UpdateWindow
LoadCursorW
TranslateMessage
LoadBitmapA
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
LoadIconA
PostMessageA
GetClassLongW
SetWindowTextW
ShowWindow
GetKeyboardState
kernel32
GetProcessHeap
GetModuleHandleA
HeapCreate
HeapFree
DeleteFileW
CreateFileW
HeapReAlloc
SetFilePointer
WriteFile
ReadFile
HeapAlloc
gdi32
GetStockObject
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ