Static task
static1
Behavioral task
behavioral1
Sample
bbfb267ab3d49b608c266c79c0fa3250_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
bbfb267ab3d49b608c266c79c0fa3250_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
bbfb267ab3d49b608c266c79c0fa3250_NeikiAnalytics
-
Size
30KB
-
MD5
bbfb267ab3d49b608c266c79c0fa3250
-
SHA1
e14201e5482d54fce832ba3603ab770cffdf739a
-
SHA256
aaa1ca831f30f6d49f5f7400aff90314b667bb1eade211b3b8b31dddfb4b666a
-
SHA512
df4de5b8e43849101ef73702f6271264674114ed0316343ab3f02c147b4e1fe23713a64b6765393dcfa813fe0cd7cde531094ba69799cc47ebe2e15177286f04
-
SSDEEP
384:CV6wM2h3ln/3m0p/Qhlg8dgQBY8hrBpj6480BpLe2MJ0W8xF:Q6K7fJKFiQTrLjdTLTW8xF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbfb267ab3d49b608c266c79c0fa3250_NeikiAnalytics
Files
-
bbfb267ab3d49b608c266c79c0fa3250_NeikiAnalytics.exe windows:4 windows x86 arch:x86
93ef196156d6da1d4462ba7d424ca7b0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClientRect
GetMessageA
EndPaint
ShowWindow
UpdateWindow
DrawTextA
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
MessageBoxA
DefWindowProcA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
PostQuitMessage
GetWindowRect
kernel32
GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentProcessId
GetCurrentProcess
GetSystemTimeAsFileTime
CreateFileA
gdi32
CreateFontIndirectA
DeleteObject
CreateCompatibleDC
CreateSolidBrush
CreatePen
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bss Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ