Static task
static1
Behavioral task
behavioral1
Sample
7cd3a07becd5bef680a41f8013e71a00_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7cd3a07becd5bef680a41f8013e71a00_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
7cd3a07becd5bef680a41f8013e71a00_NeikiAnalytics
-
Size
65KB
-
MD5
7cd3a07becd5bef680a41f8013e71a00
-
SHA1
117784a3f93d9e273b107dbd5950d8e40cdb444d
-
SHA256
17e0df71fbdcb1db908e742b5e483ecdd9cdcded7ceafbc044dd47a6a47063bd
-
SHA512
7ce95ad8b1359f6d3bd8dd4658e8cad0a35aaa5c0aaaf0a0c65247f7b1a5d90986c9261a6b0b66e8b829072e314687f428ae07fdd938c1670025528b170c46f1
-
SSDEEP
1536:ECq3yRuqrI01eArdW/O7JnI2e13XiLij40MkTUVqa/Oul:7WNqkOJWmo1HpM0MkTUmul
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7cd3a07becd5bef680a41f8013e71a00_NeikiAnalytics
Files
-
7cd3a07becd5bef680a41f8013e71a00_NeikiAnalytics.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 49KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE