Static task
static1
Behavioral task
behavioral1
Sample
6af79bb16a6ec8264c27a1baa6f1d630_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
6af79bb16a6ec8264c27a1baa6f1d630_NeikiAnalytics
-
Size
96KB
-
MD5
6af79bb16a6ec8264c27a1baa6f1d630
-
SHA1
a68655597fb7ad5c30babe143bbcb5107f1946d1
-
SHA256
1e21147cc95c45ba9f5c962e93b46b6beccd7a492a608bfe930c6b245538b34f
-
SHA512
a90eccbe1f3c5fdb3eb4a713b61c9e05f3d3ca42a6b736e44081616d00c9cdf0ea42b662051e70f35c67e1076db21c4cc0a715154f8b6ab86a39e0e096a9149f
-
SSDEEP
1536:xrujpCL0zSnYOM1tkaaVeTvEQ6KoIV7t1XXweaiJOOxxfYW6wL0BsuA/:Zuj+0GnoDPAQvoQrXXwhibg00Be
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6af79bb16a6ec8264c27a1baa6f1d630_NeikiAnalytics
Files
-
6af79bb16a6ec8264c27a1baa6f1d630_NeikiAnalytics.exe windows:4 windows x86 arch:x86
e8b4c7662649cb440afca8c5b4f97417
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__getmainargs
_adjust_fdiv
__p__commode
__p__fmode
_initterm
__setusermatherr
_controlfp
__p___initenv
_XcptFilter
_exit
tolower
malloc
free
strncpy
printf
exit
strstr
__set_app_type
_except_handler3
_stricmp
kernel32
_lopen
_llseek
_lclose
_lread
_lcreat
_lwrite
MoveFileExA
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 762B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE