Static task
static1
Behavioral task
behavioral1
Sample
71cad012b9b15f5063dc8da4db4345e0_NeikiAnalytics.exe
Resource
win7-20240215-en
General
-
Target
71cad012b9b15f5063dc8da4db4345e0_NeikiAnalytics
-
Size
84KB
-
MD5
71cad012b9b15f5063dc8da4db4345e0
-
SHA1
ad8f12033badb8d59a073599773514b61d4a3577
-
SHA256
59fa46cd4276cc689015eacc4e83f62a7efb8c6e6527bebbc0bf270016999757
-
SHA512
3036ca54f1e77f7375f4a732af760d42166e9487735273d193d9e4cb63bf7a2432fce88c9b2007748b37eee2fd0d5dc9209abe6d765e39d7c3e7c81efc02b073
-
SSDEEP
1536:6gfBTHG+Uv10bASA4lgV1GBrCDA3X6mhdP3MoTLpdK:6gfR8aXAZumDAjhJMoTLy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71cad012b9b15f5063dc8da4db4345e0_NeikiAnalytics
Files
-
71cad012b9b15f5063dc8da4db4345e0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
e8b4c7662649cb440afca8c5b4f97417
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__getmainargs
_adjust_fdiv
__p__commode
__p__fmode
_initterm
__setusermatherr
_controlfp
__p___initenv
_XcptFilter
_exit
tolower
malloc
free
strncpy
printf
exit
strstr
__set_app_type
_except_handler3
_stricmp
kernel32
_lopen
_llseek
_lclose
_lread
_lcreat
_lwrite
MoveFileExA
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 762B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE