Static task
static1
Behavioral task
behavioral1
Sample
2b1d36d844d8bcae5deba25fef5503a0_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2b1d36d844d8bcae5deba25fef5503a0_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
2b1d36d844d8bcae5deba25fef5503a0_NeikiAnalytics
-
Size
59KB
-
MD5
2b1d36d844d8bcae5deba25fef5503a0
-
SHA1
1b06ad7b4db81c8411724dd8385f5137c6a0f8ec
-
SHA256
b9d81962f21682b23f6785dee947a6d8b8e6293ae005e6b10763f94ef2a916e9
-
SHA512
2ada2eb5692d7b0be4fc4228c2720848ab98f13547a9c94394e5102db18c2e83a5fbce629acd17bafc9d7185f375e3662a8f9f7bd8308a6cdbb699b1d7cc9c61
-
SSDEEP
768:szM/e9xPnxrdAakEfzQsEkejRLXmIdgssROTrj2b:3/Q5xmGXEkejRLXmIdYRv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b1d36d844d8bcae5deba25fef5503a0_NeikiAnalytics
Files
-
2b1d36d844d8bcae5deba25fef5503a0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
411c26819234a12cc52aaaf849f1d844
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
VirtualAlloc
CloseHandle
CreateFileW
DeleteFileW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetCurrentDirectoryW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
wininet
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetCloseHandle
InternetReadFile
shell32
ShellExecuteW
ntdll
RtlDecompressBuffer
swprintf
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 903B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ