Static task
static1
Behavioral task
behavioral1
Sample
49de6b5923ff5f9421f46e08562fe340_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
49de6b5923ff5f9421f46e08562fe340_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
49de6b5923ff5f9421f46e08562fe340_NeikiAnalytics
-
Size
24KB
-
MD5
49de6b5923ff5f9421f46e08562fe340
-
SHA1
76d0db0c5eb9618d038e7a0d8eed255421657c8b
-
SHA256
36bb5edcc653c7ca8fdf7f37f8bbe4a60aa77825e7287f60c75e7dd717e16d68
-
SHA512
f39318f9a606e76c9d3d2b2412ea9729404258db076a2d0ad19afdd4cf251f308f72d3c28515e7b35d86defc64885c3339c6d235a6ff59a6dbd911fc5b4e0eda
-
SSDEEP
384:nmAR2pSkgt+KN8zRKlJIXzx5rslhF8sy8dixo6qPoZusEBCT5GFr/1f:rR20LRN8NKlJYFBsJGq5lBAGV/1f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49de6b5923ff5f9421f46e08562fe340_NeikiAnalytics
Files
-
49de6b5923ff5f9421f46e08562fe340_NeikiAnalytics.exe windows:4 windows x86 arch:x86
42e7c14ca48123966bb2bc209b151b7d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__osver
__p__winver
__toascii
__argc
__doserrno
__threadid
user32
MessageBoxA
MessageBeep
kernel32
CreateWaitableTimerW
CopyFileW
DeleteAtom
EnumCalendarInfoExW
DeleteFiber
FatalExit
CreateFiber
GetLastError
Sections
.text Size: 14KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE