Static task
static1
Behavioral task
behavioral1
Sample
7f240d6660bf3d0521f0ce77126dd500_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7f240d6660bf3d0521f0ce77126dd500_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
7f240d6660bf3d0521f0ce77126dd500_NeikiAnalytics
-
Size
1.2MB
-
MD5
7f240d6660bf3d0521f0ce77126dd500
-
SHA1
a5d7d1e52471a8ffcd77f30038a648ab5db90f42
-
SHA256
4ff9b5f7d13be4504d983ea76ce58ff52ce7b6fdab3268df530750e055717a4d
-
SHA512
401ab2fdaf1c9322621436e23b4bc400b6d331b9cac9eff2774fdc958b3d0da5b8f085bad661c41cb697bc27c0424d14bfc881a4b9207af653df887f070978e5
-
SSDEEP
24576:7A7QPS8xUfKf1EAo1djoDPVv4AnrYxPz2R0ArrXa/N5nz5i:7Yd8xUfKf1EAo1duPNnrePz2OAO51i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f240d6660bf3d0521f0ce77126dd500_NeikiAnalytics
Files
-
7f240d6660bf3d0521f0ce77126dd500_NeikiAnalytics.exe windows:4 windows x86 arch:x86
0a3133bce3fcc51e25ff493eb26c9379
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
ExitProcess
advapi32
RegCreateKeyA
gdi32
CreateCompatibleDC
user32
MessageBoxA
version
GetFileVersionInfoA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 26B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 855B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Shared Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 994B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
stxt774 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
stxt371 Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE