Static task
static1
Behavioral task
behavioral1
Sample
b0076849692947c04cb35d64b02efae0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b0076849692947c04cb35d64b02efae0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
b0076849692947c04cb35d64b02efae0_NeikiAnalytics
-
Size
2.5MB
-
MD5
b0076849692947c04cb35d64b02efae0
-
SHA1
aaba0e00d57901ead92df3d92a7e200daa360959
-
SHA256
bdca7e8519206a9ba9f57be02cc978cedd5fd68397042836fbabd40d7e56f8c0
-
SHA512
c09b19d3ed11b53db9cc3baf448068e0c8d9557f03fb4ababde59c91bc1cc7ef97d5536c4f2da42ff9e2fc37a80f242fc308b8922386038c3d65b91c1bb323c4
-
SSDEEP
49152:V6lFDYStjBN6vkGkv/1NhGHcAiUCfvNZSgtOdgWwVFHBNVe1wNaXJPivM:VzSjNkkr/BG8AiUSvOdgBzBjeOIBivM
Malware Config
Signatures
Files
-
b0076849692947c04cb35d64b02efae0_NeikiAnalytics.exe windows:6 windows x86 arch:x86
Code Sign
29:dd:30:a5:78:1b:bd:4f:b1:af:0d:73:ee:04:31:1dCertificate
IssuerCN=Uniroyal acteria AssistantNot Before06/02/2023, 08:00Not After06/02/2024, 08:00SubjectCN=Uniroyal acteria Assistant57:39:d8:e1:47:d6:fa:81:0b:c4:52:8e:7c:33:0f:08:a4:31:1d:ef:c8:b9:07:d3:22:32:d1:69:bd:0b:27:77Signer
Actual PE Digest57:39:d8:e1:47:d6:fa:81:0b:c4:52:8e:7c:33:0f:08:a4:31:1d:ef:c8:b9:07:d3:22:32:d1:69:bd:0b:27:77Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 835KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 140KB - Virtual size: 468KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 929KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 74KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 533KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE