Static task
static1
Behavioral task
behavioral1
Sample
ad6be6f266ef22667723cf388bb4c380_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ad6be6f266ef22667723cf388bb4c380_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
ad6be6f266ef22667723cf388bb4c380_NeikiAnalytics
-
Size
2.5MB
-
MD5
ad6be6f266ef22667723cf388bb4c380
-
SHA1
3298cf93316a6144474c84cd1defd24b3ecd1d52
-
SHA256
255c61904098a59ffad567aec7b36196c6a1102db55b1933fb824d78199c54bc
-
SHA512
16b92e45e74cfec55975087620a6a1852af978cf8137ded0cf32147c09fa088328135c4c62f0bf0307012f6d550c227bf1d762c62f8019c48a0c4227fdf443a6
-
SSDEEP
49152:tQ3RZlbInkYLAkn4pdaNn95++u9S2Nspc6j64H2bLqZuCyECGGYetCyyCCSe:tQ3RrbO1n4pvFg2Ns5uIYLqZuCyECGGG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad6be6f266ef22667723cf388bb4c380_NeikiAnalytics
Files
-
ad6be6f266ef22667723cf388bb4c380_NeikiAnalytics.exe windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 1.5MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 111KB - Virtual size: 442KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
buvbgnhl Size: 902KB - Virtual size: 904KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cooirmcg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE