Static task
static1
Behavioral task
behavioral1
Sample
7363eb123f48f8310f91245883998720_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
7363eb123f48f8310f91245883998720_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
7363eb123f48f8310f91245883998720_NeikiAnalytics
-
Size
97KB
-
MD5
7363eb123f48f8310f91245883998720
-
SHA1
666abc08001971a172f977d4ef1733eedcbe02ab
-
SHA256
05696d2e048169678193e270ee54ed423ba32144c2e9eb995efe0f2b7c963169
-
SHA512
af658e9a2610e827ca3f53953edc0801b78cf729c90d02f5abb56143cd810db12c08a8a4dfb908ae54aa007deb089bb3f29d80e3593ffda6719e484c87db77c1
-
SSDEEP
1536:u2bPv4RIDpKjrfQpqeEPP28vU3qgBnWpiAEY9OVWELa/4RQfsO/7gaSm+:u2bPVlKnQMeEP+8vIjBWpi4rELdC/T+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7363eb123f48f8310f91245883998720_NeikiAnalytics
Files
-
7363eb123f48f8310f91245883998720_NeikiAnalytics.exe windows:4 windows x86 arch:x86
96adb4ab5f87a8416c1a1c40010150ef
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
LoadIconA
gdi32
GetStockObject
msvcrt
exit
advapi32
RegCloseKey
shell32
ShellExecuteW
ole32
CoInitialize
Sections
.MPRESS1 Size: 91KB - Virtual size: 376KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE