Static task
static1
Behavioral task
behavioral1
Sample
b1bf540bb8ba705586d127d75d085640_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b1bf540bb8ba705586d127d75d085640_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
b1bf540bb8ba705586d127d75d085640_NeikiAnalytics
-
Size
12KB
-
MD5
b1bf540bb8ba705586d127d75d085640
-
SHA1
87a12d4be37608f42dbcb84f341d5867176ae289
-
SHA256
5c2eb728dae6beb88b304c5b055f51915b6dd4ab44ace85d39d3b8a1585a1212
-
SHA512
08a5ac1ac18553a042b38226ca81f5361415e95f96049bff468d7a1bd4d4ae935c1fe681c7cc60bd44de2b3da16a2ba8c338fec4e5c9a28c95f38c80636aca0e
-
SSDEEP
384:jCWG0U+mkKbC4WKGIgG7i4jiTRMFMuPKjGc:TG0j1ZgggiYmqM56c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1bf540bb8ba705586d127d75d085640_NeikiAnalytics
Files
-
b1bf540bb8ba705586d127d75d085640_NeikiAnalytics.exe windows:4 windows x86 arch:x86
b48c08c2b91cbeb00081797daf9dfe8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
SetHandleCount
Sections
WIN0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WIN1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WIN2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SUE Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE