Static task
static1
Behavioral task
behavioral1
Sample
b675c863517e7d5693ea494ef7c1bea0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b675c863517e7d5693ea494ef7c1bea0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
b675c863517e7d5693ea494ef7c1bea0_NeikiAnalytics
-
Size
30KB
-
MD5
b675c863517e7d5693ea494ef7c1bea0
-
SHA1
7520437f1eebc3fda29337528f7ca6ac3005a28a
-
SHA256
bab5d87405dfdac75b97054f637b5ad6625a4f5d188494f7cc1c14c9c65c58a7
-
SHA512
6b2ce552a3197e9b25ac467f15460b8dfc373612cc25d4313916a04a55dbdb68f288cb8a835aa2e4fc41480944fcb65859f9fbdaaf3f19a5d50ee376aa1fa536
-
SSDEEP
768:/XQ4/jRtaMFGEuEEoscOTe2Jg66gRLnyJVYLy0d4ygbbimisloN:f1vaM8Ex7OTXJamLneVu2yzN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b675c863517e7d5693ea494ef7c1bea0_NeikiAnalytics
Files
-
b675c863517e7d5693ea494ef7c1bea0_NeikiAnalytics.exe windows:1 windows x86 arch:x86
68675c8b50c5ad2ebdcafc2660a2c3cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
IsBadCodePtr
GetCurrentThread
LocalHandle
Sections
.text Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 422B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 28KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE