Static task
static1
Behavioral task
behavioral1
Sample
0c7c296c3fa6a93fef7a1311a861dc50_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0c7c296c3fa6a93fef7a1311a861dc50_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
0c7c296c3fa6a93fef7a1311a861dc50_NeikiAnalytics
-
Size
178KB
-
MD5
0c7c296c3fa6a93fef7a1311a861dc50
-
SHA1
03f9d86a08e6c03279d8e415f9bb49d7a304ae9f
-
SHA256
0a05de2fbcf76dc6adb8eacb6671274e01bc26409bd131b979e1ab1ac96310be
-
SHA512
e7c8a25e8e71221293c37299485a8838062057e28c8e8f72ced017cb04f858755f6b9f8c72b84d40d3e3dd025595a5c3745770472b9445315fa8a0bb0e5c3763
-
SSDEEP
3072:1OHxRd36XCFG48q5u+KOO5UiaQmGjE4+Fk00digKw18R7Xr6s/vM59/kFI6yz9Vr:1+36XCW86OjiaQmngrBWmsFfozfFL0dG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c7c296c3fa6a93fef7a1311a861dc50_NeikiAnalytics
Files
-
0c7c296c3fa6a93fef7a1311a861dc50_NeikiAnalytics.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 172KB - Virtual size: 568KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE