Static task
static1
Behavioral task
behavioral1
Sample
5d2c83336f17c82edc2308674ab5ee00_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5d2c83336f17c82edc2308674ab5ee00_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
5d2c83336f17c82edc2308674ab5ee00_NeikiAnalytics
-
Size
46KB
-
MD5
5d2c83336f17c82edc2308674ab5ee00
-
SHA1
7f992bbd979cd848bee8d26d1a7ebcff8ea65247
-
SHA256
6c978c045ae49dff8cf391d16bbd7b32c45b28e62044b9ffd5d9cdcbb492aac3
-
SHA512
defa036c727752e471fe5b213eb739da1fa669411b87c5d533effe99083012ed1a4bcfb5f2e866700ed06d7c7f31a0be5580d8a487b4a9e7cb7e46c4ed3a9b6a
-
SSDEEP
768:m+ozTJd151sWCOsku1nz6cKM4kIAcTc1v2:noPWKFkIAp1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d2c83336f17c82edc2308674ab5ee00_NeikiAnalytics
Files
-
5d2c83336f17c82edc2308674ab5ee00_NeikiAnalytics.exe windows:24870 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
rizarrrz Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
iiirrqyr Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
abrrarar Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qqjyzbzb Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ