Static task
static1
Behavioral task
behavioral1
Sample
2aad01174bde79d6c8b684e4a4f36cf0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2aad01174bde79d6c8b684e4a4f36cf0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
2aad01174bde79d6c8b684e4a4f36cf0_NeikiAnalytics
-
Size
130KB
-
MD5
2aad01174bde79d6c8b684e4a4f36cf0
-
SHA1
13cfe9348b5ec1d16afd54fe1bef566ca1a25151
-
SHA256
d9e75a55f57e48a439c034b70ed42a68344542612ebc7182b9b07504cb481b1d
-
SHA512
3924647071b5c07b8de764fff31328899f53d16a639345ded34116d1cbe18bcd72bf00845e73f9f6531865bc428298f6287d3db8aa8e442e37442e96494f7eee
-
SSDEEP
3072:0RtdEI2MyzNO2GUzPWtdEI2MyzNORQtOflIwoHNM2XBFV7WB7lx7+srtE89b:WtdEI2MyzNOmz+tdEI2MyzNORQtOfl1Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2aad01174bde79d6c8b684e4a4f36cf0_NeikiAnalytics
Files
-
2aad01174bde79d6c8b684e4a4f36cf0_NeikiAnalytics.exe windows:5 windows x86 arch:x86
d49d59a6fd3b08b6c9c9979cf34e9b21
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UpdateWindow
ShowWindow
PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
SendMessageA
FillRect
GetDC
GetWindowRect
SetFocus
kernel32
GetLastError
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FindClose
FindNextFileA
DeleteFileA
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
GetEnvironmentStringsA
gdi32
CreatePen
CreateFontIndirectA
BitBlt
Sections
����t Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����ta Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����a Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE