Static task
static1
Behavioral task
behavioral1
Sample
bb311fdd29fd5c9d8ff0a7374e5ac530_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bb311fdd29fd5c9d8ff0a7374e5ac530_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
bb311fdd29fd5c9d8ff0a7374e5ac530_NeikiAnalytics
-
Size
47KB
-
MD5
bb311fdd29fd5c9d8ff0a7374e5ac530
-
SHA1
1f80af792c15b95ad851d02134230c9687d6f042
-
SHA256
080daba19cb920c41acd08463007e22ebdafd19cb6181170624d34de606b72f4
-
SHA512
fd3cc17bc2aa4fdf7e95af3acab3dfb91a8497fc688de0ded5331e1d8018f64497ca1abb1743c028015fffe860198848f5967c93ea81a30e9e49fbd8948810ce
-
SSDEEP
768:dD2oV2AJblQRNLzFrSNTVebqxjxMQhMk6Cr3H3lbv:dCoVXGRTuhBxj/hH3HVj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb311fdd29fd5c9d8ff0a7374e5ac530_NeikiAnalytics
Files
-
bb311fdd29fd5c9d8ff0a7374e5ac530_NeikiAnalytics.exe windows:5 windows x86 arch:x86
3e262236e65f95b01f5c11555a1db856
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PostQuitMessage
DefWindowProcW
UpdateWindow
LoadCursorW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
ShowWindow
PostMessageA
kernel32
FindClose
DeleteFileW
CreateFileW
SetFilePointer
ReadFile
GetStartupInfoA
GetModuleHandleW
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ