Static task
static1
Behavioral task
behavioral1
Sample
77578fd15092fc40fb8fe14c65a402f0_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
77578fd15092fc40fb8fe14c65a402f0_NeikiAnalytics
-
Size
323KB
-
MD5
77578fd15092fc40fb8fe14c65a402f0
-
SHA1
26c822a8152b4d7cc7b55c94b462c4df2967a351
-
SHA256
48d922311d3050ff46bf69e81ed956a90497d63567e8da11958ca9bc5283e465
-
SHA512
7f639fa32e24194c5d82600e80459411f1993e32a92356ac6f48018925f7f0e4860c04588499588f75f12b357ce29f9f962d91803ceb8f0e30dddc413152c081
-
SSDEEP
6144:Zt58sOQf6lghcnBBLf9tQiepbGjhboOBnSusSTUvXBirw/AwFF5:ZtisOQf6lXbpt/kbGjhV5AvXxHJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77578fd15092fc40fb8fe14c65a402f0_NeikiAnalytics
Files
-
77578fd15092fc40fb8fe14c65a402f0_NeikiAnalytics.exe windows:5 windows x86 arch:x86
06ef33a1c45fdabdfa5b6e2e08bce5aa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
LoadCursorW
advapi32
RegQueryValueExW
shell32
ShellExecuteA
ws2_32
htonl
iphlpapi
GetAdaptersInfo
Sections
.text Size: 289KB - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 24B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE