Static task
static1
Behavioral task
behavioral1
Sample
59796061280dfbb1f3bc64d22e276720_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
59796061280dfbb1f3bc64d22e276720_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
59796061280dfbb1f3bc64d22e276720_NeikiAnalytics
-
Size
2.6MB
-
MD5
59796061280dfbb1f3bc64d22e276720
-
SHA1
8912b5a74d1a094dc70dbd388c83305ca56dcecf
-
SHA256
33bd9467f94651afdd3325d64e3ef343af587fa77455793df34d32897972a0e6
-
SHA512
46d7d42632d95d5516fec598f411fc3f7e889f0afcb2fe4619fc743350d8db49d1157e0f3f908ef55f8b7b6387bdfc4f47b6c52ddea1b707c44e27e46548f779
-
SSDEEP
49152:PNkrxvMLWiGCEl8QyzWZuS90XhsfmI/Hbg9stzKMtuCCWNaIXz42he:1K1MLWiGCEhyqhKRwm67sstWMtulKpXY
Malware Config
Signatures
Files
-
59796061280dfbb1f3bc64d22e276720_NeikiAnalytics.exe windows:6 windows x86 arch:x86
Code Sign
38:95:ee:62:d9:c8:f9:60:b5:de:44:39:2c:c6:f3:a7Certificate
IssuerCN=Exertions Buffaloes AssistantNot Before06/02/2023, 08:00Not After06/02/2024, 08:00SubjectCN=Exertions Buffaloes Assistanta8:c1:32:79:b0:c1:21:5d:55:93:12:67:a4:0e:a2:73:ee:7a:55:1e:9b:d1:4a:0b:2a:c9:b6:90:71:50:4d:19Signer
Actual PE Digesta8:c1:32:79:b0:c1:21:5d:55:93:12:67:a4:0e:a2:73:ee:7a:55:1e:9b:d1:4a:0b:2a:c9:b6:90:71:50:4d:19Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 835KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 140KB - Virtual size: 468KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 983KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 74KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 588KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE