Static task
static1
Behavioral task
behavioral1
Sample
73eeacd49ec678db0daf1acaade12630_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
73eeacd49ec678db0daf1acaade12630_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
73eeacd49ec678db0daf1acaade12630_NeikiAnalytics
-
Size
53KB
-
MD5
73eeacd49ec678db0daf1acaade12630
-
SHA1
31374b55ec00c1734478dd9c5096b1886993ef1c
-
SHA256
62ac2d0f1107a95c88d968556d293974e6ae9000d13b0d618bf07e8e3e520c66
-
SHA512
76cd21f8c125fd618b1b4e15eb8bf222b425653f76aaf3a037236ffcd0d8af3218b880ef7ecc7b986f9acd7a90f5bf620c1a89c0a28816e91fd94105e9bd54cf
-
SSDEEP
768:JbNjs/1T6PPq+lhVtQZsQ/TTiZTks2vNWT:ZNjs/AlhVtWsQ/T2Z4dvNWT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73eeacd49ec678db0daf1acaade12630_NeikiAnalytics
Files
-
73eeacd49ec678db0daf1acaade12630_NeikiAnalytics.exe windows:4 windows x86 arch:x86
82cedb12d90ebc9b82cb1b1846446517
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterClassExW
LoadCursorW
LoadIconW
GetMessageW
TranslateMessage
DispatchMessageW
DefWindowProcW
SendMessageW
DestroyWindow
DialogBoxParamW
BeginPaint
DrawTextW
EndPaint
PostQuitMessage
SetFocus
EndDialog
CreateWindowExW
kernel32
GetTickCount
LoadLibraryA
CreateFileA
GetSystemDirectoryW
CloseHandle
CreateFileW
LoadLibraryW
GetStartupInfoA
ReadFile
GetModuleHandleA
GetCommandLineW
gdi32
CreateSolidBrush
DeleteObject
GetStockObject
SetTextAlign
comctl32
InitCommonControlsEx
shell32
CommandLineToArgvW
DragFinish
ExtractIconA
crtdll
_local_unwind2
_global_unwind2
_fmode_dll
_commode_dll
??2@YAPAXI@Z
_initterm
_acmdln_dll
exit
_XcptFilter
_exit
__GetMainArgs
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ