Static task
static1
Behavioral task
behavioral1
Sample
4cc5e76995e34a49e945f075783a3d60_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4cc5e76995e34a49e945f075783a3d60_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
4cc5e76995e34a49e945f075783a3d60_NeikiAnalytics
-
Size
119KB
-
MD5
4cc5e76995e34a49e945f075783a3d60
-
SHA1
b615e8d13d892bd7251524cb78f269b7841428ed
-
SHA256
6f805251cbc39f59f865881844e22985eda8ea360947fc5373cdd7467e456050
-
SHA512
60dc7849991f45d4b1b78a19a10e8f62663ab144726b1409879d97b030052f06ebacab917e0995122c0b65f937717afda4accdde734c3381b987565fb304ed43
-
SSDEEP
3072:NWsjVP6lJheeeH3WI0Ar3E1LFPWxheeeH3HN:N/2Ilr3ERRR
Malware Config
Signatures
Files
-
4cc5e76995e34a49e945f075783a3d60_NeikiAnalytics.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
7d:7b:23:ed:92:46:72:a6:47:8c:fa:ae:ed:8f:57:3eCertificate
IssuerCN=MTAQI\\Eden ComputersNot Before25/01/2023, 20:54Not After26/01/2024, 02:54SubjectCN=MTAQI\\Eden Computers89:96:60:93:b6:33:05:b2:0e:6a:86:79:b5:72:b0:92:24:aa:ed:53:f9:3d:f0:ae:05:55:81:a6:6a:ea:b1:d9Signer
Actual PE Digest89:96:60:93:b6:33:05:b2:0e:6a:86:79:b5:72:b0:92:24:aa:ed:53:f9:3d:f0:ae:05:55:81:a6:6a:ea:b1:d9Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
D:\#C_Project\btcflash - Copy\Bitcoin\obj\Debug\BTC Flash by Block Chain Developer.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ