Static task
static1
Behavioral task
behavioral1
Sample
7fa69363bdc8afea6259727feec34e30_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
7fa69363bdc8afea6259727feec34e30_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
7fa69363bdc8afea6259727feec34e30_NeikiAnalytics
-
Size
22KB
-
MD5
7fa69363bdc8afea6259727feec34e30
-
SHA1
a15c734cebd19cb4a16356eaafaa06c9ddbe64ff
-
SHA256
1cde516e400e936f535a4d486d184992b56f746d8b6133e50b66f739dbe684be
-
SHA512
d3f91312454cacca5be5a4899bceb9f5ebdbd97d3273ccb0e5f1ab7ec41ac6188aed4597e9401215d1626c35454ead26ccc88bcbf93e7766f599002f116ca22e
-
SSDEEP
192:qytgAeuB2S7FFWlSkABcI+EWL/hTUozHLYDo2SIcIn8/wKUpwZNWj4mNWkmxp7I:qySFpcI5pTUo7L2FSmnmwKAw2kkaI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7fa69363bdc8afea6259727feec34e30_NeikiAnalytics
Files
-
7fa69363bdc8afea6259727feec34e30_NeikiAnalytics.exe windows:4 windows x86 arch:x86
72c716384ea0a2091fb58c5c9a356b6f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
SendMessageA
GetWindowRect
kernel32
GetStartupInfoA
GetModuleFileNameA
lstrcatA
CloseHandle
HeapCreate
GetModuleHandleA
HeapAlloc
GetProcessHeap
LoadLibraryA
gdi32
GetTextExtentPoint32W
SelectObject
TextOutW
comdlg32
GetSaveFileNameW
GetFileTitleW
comctl32
ord17
ole32
CoTaskMemFree
CoTaskMemAlloc
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 914B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ