Static task
static1
Behavioral task
behavioral1
Sample
429e18e30ac890f50067b58a62e1a020_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
429e18e30ac890f50067b58a62e1a020_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
429e18e30ac890f50067b58a62e1a020_NeikiAnalytics
-
Size
22KB
-
MD5
429e18e30ac890f50067b58a62e1a020
-
SHA1
25e2b12caebeb797dc46ef3474adf5b8ccfb7544
-
SHA256
9b77ae1c83be2f96e90689fa7b8ea5c4fc56329badac256d67999062f28901f8
-
SHA512
37eb1033a8f0a9299706b658a21a4c5aced36314aa0ad5bb0a7d143558f19110bb665dc61e0c40c2b9052b3eea0cccd5eafbe9b2f9c67666af3ef949c97a9a07
-
SSDEEP
384:ztGhPq/PSVoYZXgW8PK3mUarVMYVt8a6c6n5er7EgSgXuJDth+:zt16VoYZwPK2UarVMYYaFbr799mH+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 429e18e30ac890f50067b58a62e1a020_NeikiAnalytics
Files
-
429e18e30ac890f50067b58a62e1a020_NeikiAnalytics.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 13KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE