Static task
static1
Behavioral task
behavioral1
Sample
d07d09963ba86fad4f0290d23cb2b180_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d07d09963ba86fad4f0290d23cb2b180_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
d07d09963ba86fad4f0290d23cb2b180_NeikiAnalytics
-
Size
22KB
-
MD5
d07d09963ba86fad4f0290d23cb2b180
-
SHA1
ee2d34db5c4a036b1aa7bb17b8d68c2e6af91c29
-
SHA256
374e3f7cf950d46dc4e338fcb17066655a80b39c607bf39daf13471813b79f98
-
SHA512
e1139d346c05f71467e5b0bf3ecac30dc86d8876071b1219b8dcb72d27ec3c78f9b184850e895d3c08d4b07ab4cef4b1a881086339f87f7766b7c34a5fc636ae
-
SSDEEP
384:RysAj50rqB970jndh32ZfTNBdkCU40pAynxM8pb1KShvXOolCv:o+EUuxTNBvU4tqM8psuO+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d07d09963ba86fad4f0290d23cb2b180_NeikiAnalytics
Files
-
d07d09963ba86fad4f0290d23cb2b180_NeikiAnalytics.exe windows:4 windows x86 arch:x86
66b5d6425fcd338584f18819fb7b9b04
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GlobalFree
CreateThread
Sleep
VirtualProtect
LoadLibraryA
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 210B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ